← 返回 Skills 市场

Django

Name: Django
Author: ivangdavila

作者 Iván · GitHub ↗ · v1.0.1

linuxdarwinwin32 ✓ 安全检测通过

1391

总下载

当前安装

版本数

在 OpenClaw 中安装

/install django

功能描述

Avoid common Django mistakes — QuerySet evaluation, N+1 queries, migration conflicts, and ORM traps.

使用说明 (SKILL.md)

Quick Reference

Topic	File
QuerySet lazy eval, N+1, transactions	`orm.md`
Request handling, middleware, context	`views.md`
Validation, CSRF, file uploads	`forms.md`
Migrations, signals, managers	`models.md`
XSS, CSRF, SQL injection, auth	`security.md`
Async views, ORM in async, channels	`async.md`

Critical Rules

QuerySets are lazy — iterating twice hits DB twice, use list() to cache
select_related for FK/O2O, prefetch_related for M2M — or N+1 queries
update() skips save() — no signals fire, no auto_now update
F() for atomic updates — F('count') + 1 avoids race conditions
get() raises DoesNotExist or MultipleObjectsReturned — use filter().first() for safe
DEBUG=False requires ALLOWED_HOSTS — 400 Bad Request without it
Forms need {% csrf_token %} — or 403 Forbidden on POST
auto_now can't be overridden — use default=timezone.now if need manual set
exclude(field=None) excludes NULL — use filter(field__isnull=True) for NULL
Circular imports in models — use string reference: ForeignKey('app.Model')
transaction.atomic() doesn't catch exceptions — errors still propagate
sync_to_async for ORM in async views — ORM is sync-only

安全使用建议

This skill is a set of static Django best-practice notes and appears internally consistent. Because it is instruction-only (no install, no secrets requested), it carries low risk by itself. Before installing, consider: (1) verify the content matches your expected Django version and coding standards, (2) be cautious if you later combine this skill with other skills that can execute code or access files — those could change the risk profile, and (3) review the security.md recommendations in your own codebase (e.g., ensure SECRET_KEY and ALLOWED_HOSTS are handled properly).

功能分析

Type: OpenClaw Skill Name: django Version: 1.0.1 This skill bundle is purely informational, providing documentation on common pitfalls and best practices in Django development, including security. The `SKILL.md` and other markdown files (`security.md` in particular) detail various 'traps' such as XSS, CSRF, and SQL injection risks, but present them as vulnerabilities to be avoided, consistent with the skill's stated purpose of helping 'Build secure Django apps'. There is no executable code, no instructions for prompt injection, data exfiltration, or any other malicious activity.

能力评估

✓ Purpose & Capability

The name/description (Django ORM, N+1, migrations, security) matches the provided markdown files; the only declared binary requirement is python3, which is reasonable for a Django-focused skill and no unrelated credentials or tools are requested.

✓ Instruction Scope

SKILL.md and the included docs contain static guidance and do not instruct the agent to read system secrets, access external endpoints, or run arbitrary commands. There is no scope creep in the runtime instructions.

✓ Install Mechanism

No install spec and no code files — this is instruction-only, so nothing is downloaded or written to disk during install.

✓ Credentials

The skill requests no environment variables, credentials, or config paths; requested access is minimal and proportional to being a documentation skill.

✓ Persistence & Privilege

always is false and the skill is user-invocable; it does not request persistent system presence or modify other skills or system-wide settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install django
安装完成后，直接呼叫该 Skill 的名称或使用 /django 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Initial release

v1.0.0

Initial release

元数据

Slug django

版本 1.0.1

许可证 —

累计安装 6

当前安装数 6

历史版本数 2

常见问题

Django 是什么？

Avoid common Django mistakes — QuerySet evaluation, N+1 queries, migration conflicts, and ORM traps. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1391 次。

如何安装 Django？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install django」即可一键安装，无需额外配置。

Django 是免费的吗？

是的，Django 完全免费（开源免费），可自由下载、安装和使用。

Django 支持哪些平台？

Django 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（linux, darwin, win32）。

谁开发了 Django？

由 Iván（@ivangdavila）开发并维护，当前版本 v1.0.1。