AI Blocks › Keep your code secure
Django access control auditor
Point it at a Django project. Get a review of who can see or change what, with fixes for each gap.
Django access control auditor is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · CC BY 4.0 licence · Made by sickn33 · Level: advanced · Thinking: high
Made by sickn33. See the original on GitHub; we copied it as it is, with its licence.
What it does
A review of your Django code that answers one question: can user A see, change or delete user B's data? You get confirmed problems, each with a fix, not a list of guesses. The skill first learns how your project handles permissions: decorators, mixins, serializers, queryset filters and so on. Then it asks specific questions about each data flow and traces the code to find where checks happen or are missing. It reports only what it has proved by reading the code. It is built on the OWASP guidance on object-level authorization, and it works on Django and Django REST Framework. It reads your code and does not run attacks.
You give it
- Your Django or DRF project code
- Your user and permission model (optional)
- Which areas worry you most (optional)
You get
- A summary of how authorization works in your code
- Confirmed access control gaps
- The code path behind each finding
- A suggested fix for each gap
Use it when
- You are about to launch and want to know if users can reach each other's records.
- An API takes object IDs and you are unsure if ownership is checked.
- You added new endpoints and need a security check before release.
- A customer asks for proof that data is separated between accounts.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can run code and read your project files.