← 返回 Skills 市场
Django Project Creator
作者
Nassi Mohammed
· GitHub ↗
· v1.0.0
694
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install django-creator
功能描述
Automatically create a ready-to-use Django or Django REST Framework project with preconfigured settings and environment provisioning for fast, consistent setup.
使用说明 (SKILL.md)
This project eliminates the time wasted on creating virtual machines and setting up environments from scratch. It automatically provisions a ready-to-use development environment with commonly used default requirements, allowing you to choose between Django or Django REST Framework depending on your project needs.\r \r The goal is to standardize and accelerate project initialization by providing a consistent, production-ready structure from day one. Instead of manually configuring dependencies, environments, and base settings, developers can instantly bootstrap a fully configured backend setup with best practices already applied.\r \r
- Key features include:\r \r
- Automated environment provisioning\r \r
- Preconfigured project structure following best practices\r \r
- Support for both Django and Django REST Framework\r \r
- Default development and production-ready settings\r \r
- Dependency management and isolated environments\r \r
- Scalable foundation suitable for small projects or large deployments\r \r This solution is ideal for developers and teams who want to focus on building features rather than repeatedly performing boilerplate setup tasks. It reduces human error, improves consistency across projects, and significantly speeds up the development workflow
安全使用建议
This skill appears to do what it claims (scaffold Django/DRF projects) and includes an executable script that will write files, create a virtualenv, install packages from PyPI, and run Django migrations. Before running/installing: (1) review the script (already included) so you understand the exact files it will create and commands it will run; (2) run it in a disposable directory or sandbox; (3) use an isolated virtual environment to avoid contaminating a global Python environment; (4) be aware it will perform network operations (pip installs) — verify the packages and your network/policy constraints; (5) note that the script is interactive and may not behave as expected in non-interactive runs. If you need automated/non-interactive provisioning or stricter supply-chain guarantees, prefer tools with vetted release artifacts or add explicit package version pins and an install spec.
功能分析
Type: OpenClaw Skill
Name: django-creator
Version: 1.0.0
The `scriptBackend.py` file, designed to automate Django project setup, contains multiple critical shell injection and path traversal vulnerabilities. User-controlled inputs such as `path`, `projectName`, `appName`, and `modulsName` are directly interpolated into `os.system` commands without sanitization. This allows an attacker to execute arbitrary commands on the host system (Remote Code Execution) or manipulate file paths by providing malicious input. While the skill's stated purpose is benign, the insecure implementation poses a severe security risk, classifying it as suspicious due to these exploitable vulnerabilities.
能力评估
Purpose & Capability
The name/description (Django project creator) align with the included script: it creates Django projects/apps, writes settings/urls/views/serializers, creates models, and installs Django/DRF-related packages. There are no unrelated environment variables, binaries, or external service credentials requested.
Instruction Scope
SKILL.md describes environment provisioning and scaffolding only. The actual script performs file writes, directory changes, pip installs, and runs Django management commands (makemigrations, migrate). Those actions are within the stated scope, but they are invasive filesystem and network actions and are interactive (require user input). The SKILL.md does not explicitly warn about network package installs or migrations — users should expect those side effects.
Install Mechanism
There is no install spec (instruction-only skill). The shipped Python script itself invokes pip at runtime to install packages from PyPI (e.g., django, djangorestframework, drf-nested-routers, django-cors-headers). This is coherent with the purpose but means the skill will cause network activity and modify the local Python environment when run.
Credentials
The skill requests no environment variables or credentials. It operates solely on filesystem paths provided by the user and installs public packages — the level of access requested is proportional to its purpose.
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system-wide agent settings. Its persistence is limited to creating project files, virtualenvs, installing packages, and running migrations in the user-specified path.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install django-creator - 安装完成后，直接呼叫该 Skill 的名称或使用
/django-creator触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release:
- Automates creation of ready-to-use Django or Django REST Framework environments.
- Provides a preconfigured project structure with best practices.
- Includes default development and production-ready settings.
- Manages dependencies and creates isolated environments.
- Designed to standardize, accelerate, and simplify backend project initialization.
元数据
常见问题
Django Project Creator 是什么？
Automatically create a ready-to-use Django or Django REST Framework project with preconfigured settings and environment provisioning for fast, consistent setup. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 694 次。
如何安装 Django Project Creator？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install django-creator」即可一键安装，无需额外配置。
Django Project Creator 是免费的吗？
是的，Django Project Creator 完全免费（开源免费），可自由下载、安装和使用。
Django Project Creator 支持哪些平台？
Django Project Creator 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Django Project Creator？
由 Nassi Mohammed（@moenassi）开发并维护，当前版本 v1.0.0。
推荐 Skills