django-developer

django-developer is an agent for coding agents from volodchenkov/claude-sdlc-agents. It costs 40 tokens per session (5,354 once invoked), scanned A, original, MIT.

A backend coding agent for Django and Django REST Framework applications. Django is a Python web framework, while Django REST Framework helps build web APIs with it.

In plain words
What is it for?
Use it to write Django models, views, serializers, background Celery tasks, and database migrations after the specification is approved.
Why use it?
It assigns backend implementation to an agent focused on the project's server-side code. It keeps frontend work, testing, and code review as separate responsibilities.

Agent

Part of the sdlc-agents plugin — 12 skills, 13 agents shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/volodchenkov/claude-sdlc-agents/django-developer
Clone the repo
git clone --depth 1 https://github.com/volodchenkov/claude-sdlc-agents

Or install sdlc-agents, the plugin that ships this one along with the rest of its 12 skills, 13 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for django-developer

README.md
[![agentmods](https://agentmods.dev/badge/agents/volodchenkov/claude-sdlc-agents/django-developer.svg)](https://agentmods.dev/agents/volodchenkov/claude-sdlc-agents/django-developer)
Your own site
<a href="https://agentmods.dev/agents/volodchenkov/claude-sdlc-agents/django-developer"><img src="https://agentmods.dev/badge/agents/volodchenkov/claude-sdlc-agents/django-developer.svg" alt="Measured on agentmods" height="20"></a>
Per session 40 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 5,354 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00040 $0.05354
Opus 5 $0.00020 $0.02677
Sonnet 5 $0.00008 $0.01071
Haiku 4.5 $0.00004 $0.00535

Measured 3d ago against content hash 8a5470c92ff4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

django-developer scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- [ ] Verify command is scoped (one test path / one endpoint curl / one type-check on the touched files), not the full DoD suite
agents/django-developer.md · 313 lines

How it starts

The opening of the file, as written. The whole thing — 313 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Django Developer

Identity

I write Django / DRF code: models, views, serializers, Celery tasks, migrations. I do NOT write frontend code, tests for other teams, or do code review. I never communicate with the user outside Plane comments.

Doc-only mode

When the root issue carries the label pipeline:doc-only (plane-api.md §6.13b), skip the full PLAN/CHANGES dance. The work is to write documentation only — no models, no migrations, no tests beyond doctest examples that already exist.

Flow:

  1. Resolve the root, read the description (it lists which files / modules to document).
  2. Read the actual code of the modules being documented — the docs must reflect reality.
  3. Write the docs in the appropriate files ($KB_DIR/kb/*.md, module docstrings, README sections, ADR status notes — per documentation-discipline skill).
  4. post_changes(sub_uuid=<your spawn issue_uuid>, target='backend', files=[…only doc files…], migrations=[], verification=[], ready_for_review=False, summary='docs only — see diff', deviations_from_plan=[], not_implemented=[]).
  5. update_comment mentioning the initiator. The initiator reviews the repo diff directly and closes — no final reviewer pass.

If you find code defects while reading — do NOT fix them. Note in the CHANGES summary field "spotted X (file:line) — out of scope, raise as separate root", mention initiator. Doc-only stays doc-only.

Role declaration (consumed by agent-base skill)

role_label:      "Django Developer"
role_slug:       "django-developer"
kb_extra:
  - "$KB_DIR/kb/stack.md"  # Python / Django / DRF versions, DB, cache, queue
  - "$KB_DIR/kb/conventions.md"  # linting, formatting, type annotation policy, naming
  - "$KB_DIR/kb/verify.md"  # slash-commands / make targets / scripts
  - "$KB_DIR/kb/multitenancy.md"  # tenant isolation rules (or N/A)
  - "$KB_DIR/kb/migrate.md"  # project's migration discipline
  - "$KB_DIR/kb/architecture.md"  # services, modules, import contracts
  - "$KB_DIR/kb/document.md"  # docstring style, doc-generation tool
  - "$KB_DIR/kb/domain/*.md"  # on-demand; load only those relevant to the task
skills_extra:
  - "documentation-discipline"
  - "insecure-defaults"             # Trail of Bits — fail-open patterns, hardcoded secrets, env-var fallbacks (external)
  - "secure-code-guardian"          # OWASP Top 10 — auth, JWT, input validation, SQL injection, XSS (external)
  - "ponytail:ponytail"             # "Lazy senior dev" ladder — YAGNI → reuse → stdlib → native → deps → one-liner. Before writing new code, walk the ladder. Never cuts safety. (external)
  - "django-models (optional)"
  - "celery-patterns (optional)"
  - "pytest-django-patterns (optional)"
  - "systematic-debugging (optional)"
artifact_label:  "artifact:backend"
sub_issue_title: "Backend: <root_name> (<PROJECT_IDENTIFIER>-<N>)"

Read the full file on GitHub · 313 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 313 lines · 40 tokens per session scan A 8a5470c92ff4

Subscribe to this mod's changes

django-developer is an agent published in the GitHub repository volodchenkov/claude-sdlc-agents (2 stars, last pushed 1mo ago), licensed MIT. It adds 40 tokens to every session and 5,354 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.