Agent Native

django-access-review

This skill guides agents through investigating Django and Django REST Framework code for IDOR and access control vulnerabilities.

by SentryOfficial publisherNot reviewed

Identity proven by GitHub's verified organisation badge (getsentry)

Agents
Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode, claude.ai and API
License
License unclear
Pin
d18b7aapinned Oct 9, 2026
Context cost
about 2,500 tokenswhen the skill loads
GitHub stars
1,041on getsentry/skills
Scripts
None found

What it does

“Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken access".”
The author's description, from SKILL.md

Generated summary from the skill's own text

This skill guides agents through investigating Django and Django REST Framework code for IDOR and access control vulnerabilities. It provides a five-phase methodology to understand authorization models, map attack surfaces, trace data flows, and confirm whether unauthorized users can access others' data, then report only verified findings with enforcing code fixes rather than documentation.

When to use it

  • Reviewing Django views or DRF viewsets for access control gaps
  • Investigating whether users can access other users' data by ID
  • Auditing authorization implementation in multi-tenant or role-based systems
  • Tracing specific API endpoints to verify permission enforcement

When not to

  • Looking for XSS, injection, or other non-authorization vulnerabilities
  • Reviewing code without understanding the application's authorization model first

Install

Restricted license: install from the publisher's repository and read its terms.

These commands install from the publisher's repository and need no account.

skills CLI

npx skills add getsentry/skills --skill django-access-review

Installs from the repository's default branch, which may have changed since the commit we checked.

GitHub CLI 2.90 or later

gh skill install getsentry/skills django-access-review@d18b7aa8ba878354e5c348310230e652f7690f9c

Installs the commit we checked (d18b7aa).

Copy by hand

Download the folder at d18b7aa and put it in .claude/skills/django-access-review for Claude Code and in .agents/skills/django-access-review for Codex, Cursor, Gemini CLI, GitHub Copilot and OpenCode.

Skill folder on GitHub at d18b7aa

Claude Code plugin

/plugin install sentry@claude-plugins-official

The publisher's plugin in Claude's official marketplace. It may hold more than this skill, and we have not pinned it.

Claude Code plugin

/plugin install sentry-cli@claude-plugins-official

The publisher's plugin in Claude's official marketplace. It may hold more than this skill, and we have not pinned it.

Copy for your agent

A prompt for any coding agent. It installs this skill from GitHub at the pinned commit, copies the files as they are, and runs nothing unless you ask.

Prompt

Install the agent skill "django-access-review" by Sentry.

Source, pinned to commit d18b7aa8ba878354e5c348310230e652f7690f9c:
https://github.com/getsentry/skills/tree/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/django-access-review

1. Download that folder at exactly this commit. Do not use the default branch.
2. Copy every file unchanged, keeping the folder structure, into .claude/skills/django-access-review/ for Claude Code and .agents/skills/django-access-review/ for Codex, Cursor, Gemini CLI, GitHub Copilot and OpenCode. Create the folders if they do not exist.
3. Do not edit the files, and do not run any script in the folder unless I ask you to.
4. When you are done, list the files you copied and where you put them.

Its license is restricted or not stated. Show me the license terms from the repository before you copy anything.

Listing and checks: https://www.agentnative.dev/skills/sentry/django-access-review

SKILL.md at the pin

The license of this skill does not let us show its files here.

View SKILL.md on GitHub at d18b7aa

Files

5 files, 17 KB in total. Each file has a sha256 in the pin's manifest; the first 12 characters are shown.

Skill folder on GitHub at d18b7aa
All 50 skills from Sentry

More from Sentry

  • claude-settings-audit

    This skill analyzes a repository to detect its tech stack, build tools, and service integrations, then generates recommended Claude Code settings.json…

    Claude Code · about 2.9K tokens · pinned 6 days ago

  • commit

    This skill enables the agent to create conventional commit messages following Sentry's style guide.

    Claude Code, Codex, Cursor +4 · about 430 tokens · pinned 6 days ago

  • django-perf-review

    This skill audits Django codebases for performance problems by validating issues through code tracing before reporting.

    Claude Code, Codex, Cursor +4 · about 2.8K tokens · pinned 6 days ago

  • iterate-pr

    This skill automates PR iteration by fetching CI check statuses and review feedback, then fixing actionable failures and high/medium priority comments until…

    Contains scripts

    Claude Code · about 1.2K tokens · pinned 6 days ago

  • pr-writer

    This skill helps agents write clear, reviewer-focused PR titles and descriptions by inspecting the branch, diff, and existing PR state, then crafting concise…

    Claude Code, Codex, Cursor +4 · about 1.3K tokens · pinned 6 days ago

  • secret-serialization

    This skill detects credential leaks through generated serialization when types storing secrets are converted to strings or dictionaries by logging, tracing…

    Claude Code, Codex, Cursor +4 · about 2.4K tokens · pinned 6 days ago

All Security skills

Related in Security

  • sensitive-logging-audit

    The skill helps audit and fix sensitive data leaks in Python SDK logging, exceptions, and telemetry by collecting candidate sinks, manually tracing values…

    by OpenAIOfficial publisher

    Contains scripts

    Claude Code, Codex, Cursor +3 · about 970 tokens · pinned 6 days ago

  • ai-inventory

    This skill generates an AI Bill of Materials (AIBOM) for Python projects by identifying AI models, datasets, frameworks, and tools using the Snyk AIBOM API.

    by SnykOfficial publisher

    Claude Code, Codex, Cursor +4 · about 1.7K tokens · pinned 6 days ago

  • authoring

    This skill helps agents author Falcon Fusion workflow YAML files by discovering action IDs from the live API, validating YAML against the schema, and…

    by CrowdStrikeOfficial publisher

    Contains scripts

    Claude Code · about 5.2K tokens · pinned 6 days ago

  • aig-scanner

    This skill submits security scanning tasks to Tencent AI-Infra-Guard via Python CLI, analyzing AI infrastructure, tools, skills, agents, and LLM jailbreak…

    by TencentCommunity

    Contains scripts

    Agents not labelled yet · about 3.5K tokens · pinned 6 days ago

  • security-reviewer

    This skill performs multi-language security reviews of web applications, APIs, and CLIs by checking code for common vulnerabilities across eight categories…

    by Security-Phoenix-demoCommunity

    Claude Code · about 1.1K tokens · pinned 6 days ago

  • claude-security

    Scans your repository for security issues using Claude, examines code changes or commits for vulnerabilities, and generates patch files to fix findings.

    by AnthropicOfficial publisher

    Claude Code · about 1K tokens · pinned 6 days ago

The skills listed here are third-party software, collected from public GitHub repositories as a catalog of recent skills and provided as is. Agent Native does not write or control them and is not responsible for any harm, loss or damage caused by installing or using them. Labels and checks describe what we saw at one commit and are not a guarantee. Read a skill's files before you run it. Terms of use