django-expert

An agent skill by Jeffallan, from Jeffallan/claude-skills. Tags: api, database, debugging, django, python, web.

What it does

Use when building Django web applications or REST APIs with Django REST Framework. Invoke when working with settings.py, models.py, manage.py, or any Django project file. Creates Django models with proper indexes, optimizes ORM queries using select_related/prefetch_related, builds DRF serializers and viewsets, and configures JWT authentication. Trigger terms: Django, DRF, Django REST Framework, Django ORM, Django model, serializer, viewset, Python web.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add Jeffallan/claude-skills --skill django-expert

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/Jeffallan/claude-skills
cp -r claude-skills/skills/django-expert ~/.claude/skills/django-expert

Safety box score

Grade B, low risk: 14 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a Django/DRF implementation guide, not a runnable tool, but it does instruct the agent to run Django management commands and HTTP checks while generating models, serializers, viewsets, and tests. The main risks are bounded project execution and state-changing API patterns such as purchase/delete endpoints.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	1 (low)	It explicitly tells the agent to run `manage.py makemigrations`, `manage.py migrate`, and quick `APITestCase`/`curl` checks; that is project-scoped command execution.
Network access	1 (low)	The only network use is validating local API endpoints with `curl` and the JWT routes in `references/authentication.md`; there is no downloader or exfiltration behavior.
Filesystem reach	1 (low)	The examples create and edit Django project files (`models.py`, `serializers.py`, `views.py`, `tests.py`) and migration files, but nothing outside the project tree.
Secrets & credentials	0 (none)	It says to use environment variables for secrets and shows JWT/API-key handling, but it does not read credential stores, browser sessions, keychains, or `.env` files.
Privilege & persistence	0 (none)	There is no sudo use, global install, service registration, shell startup edit, or OS configuration change.
Instruction hijack surface	0 (none)	The skill does not instruct the agent to ignore rules, hide behavior, follow remote instructions, or adopt a deceptive persona.
Irreversible actions	1 (low)	It includes state-changing patterns like `purchase()` and destructive CRUD examples, but these are app-level endpoints, not the skill autonomously making external purchases or deletions.
Transparency	0 (none)	All files are plain Markdown and code snippets; there are no binaries, encoded blobs, or unpinned downloads.

Before installing

Read `references/viewsets-views.md` if you do not want the generated app to include `purchase()` or delete endpoints.
Confirm you are comfortable with the skill running `manage.py makemigrations` and `manage.py migrate` in your Django project.
If you will use JWT, decide where the secret settings live and keep them out of `settings.py` as the skill recommends.
Try it first in a scratch Django app so you can inspect the generated migrations and view permissions before using it on a real project.

Rated 2026-10-20 by an automated review of 6 files from the skill's repository.

Source

Repository: Jeffallan/claude-skills (all skills from this repository)
Path: skills/django-expert/SKILL.md
Branch: main
Updated: 2026-09-19

database-optimizer — Optimizes database queries and improves performance across PostgreSQL and MySQL systems.
django-storages-s3 — Use when configuring Django to store static and media files on AWS S3 with django-storages.
fastapi-expert — Use when building high-performance async Python APIs with FastAPI and Pydantic V2.
fullstack-guardian — Builds security-focused full-stack web applications by implementing integrated frontend and backend components with layered security at every level.
java-architect — Use when building, configuring, or debugging enterprise Java applications with Spring Boot 3.x, microservices.
laravel-specialist — Build and configure Laravel 10+ applications, including creating Eloquent models and relationships, implementing Sanctum authentication.