← Back to Skills Marketplace
1391
Downloads
2
Stars
6
Active Installs
2
Versions
Install in OpenClaw
/install django
Description
Avoid common Django mistakes — QuerySet evaluation, N+1 queries, migration conflicts, and ORM traps.
README (SKILL.md)
Quick Reference
| Topic | File |
|---|---|
| QuerySet lazy eval, N+1, transactions | orm.md |
| Request handling, middleware, context | views.md |
| Validation, CSRF, file uploads | forms.md |
| Migrations, signals, managers | models.md |
| XSS, CSRF, SQL injection, auth | security.md |
| Async views, ORM in async, channels | async.md |
Critical Rules
- QuerySets are lazy — iterating twice hits DB twice, use
list()to cache select_relatedfor FK/O2O,prefetch_relatedfor M2M — or N+1 queriesupdate()skipssave()— no signals fire, noauto_nowupdateF()for atomic updates —F('count') + 1avoids race conditionsget()raisesDoesNotExistorMultipleObjectsReturned— usefilter().first()for safeDEBUG=FalserequiresALLOWED_HOSTS— 400 Bad Request without it- Forms need
{% csrf_token %}— or 403 Forbidden on POST auto_nowcan't be overridden — usedefault=timezone.nowif need manual setexclude(field=None)excludes NULL — usefilter(field__isnull=True)for NULL- Circular imports in models — use string reference:
ForeignKey('app.Model') transaction.atomic()doesn't catch exceptions — errors still propagatesync_to_asyncfor ORM in async views — ORM is sync-only
Usage Guidance
This skill is a set of static Django best-practice notes and appears internally consistent. Because it is instruction-only (no install, no secrets requested), it carries low risk by itself. Before installing, consider: (1) verify the content matches your expected Django version and coding standards, (2) be cautious if you later combine this skill with other skills that can execute code or access files — those could change the risk profile, and (3) review the security.md recommendations in your own codebase (e.g., ensure SECRET_KEY and ALLOWED_HOSTS are handled properly).
Capability Analysis
Type: OpenClaw Skill
Name: django
Version: 1.0.1
This skill bundle is purely informational, providing documentation on common pitfalls and best practices in Django development, including security. The `SKILL.md` and other markdown files (`security.md` in particular) detail various 'traps' such as XSS, CSRF, and SQL injection risks, but present them as vulnerabilities to be avoided, consistent with the skill's stated purpose of helping 'Build secure Django apps'. There is no executable code, no instructions for prompt injection, data exfiltration, or any other malicious activity.
Capability Assessment
Purpose & Capability
The name/description (Django ORM, N+1, migrations, security) matches the provided markdown files; the only declared binary requirement is python3, which is reasonable for a Django-focused skill and no unrelated credentials or tools are requested.
Instruction Scope
SKILL.md and the included docs contain static guidance and do not instruct the agent to read system secrets, access external endpoints, or run arbitrary commands. There is no scope creep in the runtime instructions.
Install Mechanism
No install spec and no code files — this is instruction-only, so nothing is downloaded or written to disk during install.
Credentials
The skill requests no environment variables, credentials, or config paths; requested access is minimal and proportional to being a documentation skill.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent system presence or modify other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install django - After installation, invoke the skill by name or use
/django - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Initial release
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Django?
Avoid common Django mistakes — QuerySet evaluation, N+1 queries, migration conflicts, and ORM traps. It is an AI Agent Skill for Claude Code / OpenClaw, with 1391 downloads so far.
How do I install Django?
Run "/install django" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Django free?
Yes, Django is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Django support?
Django is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).
Who created Django?
It is built and maintained by Iván (@ivangdavila); the current version is v1.0.1.
More Skills