Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ericrisco/rsc-harness/djangonpx skills add ericrisco/rsc-harness --skill djangogit clone --depth 1 https://github.com/ericrisco/rsc-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ericrisco/rsc-harness/django)<a href="https://agentmods.dev/skills/ericrisco/rsc-harness/django"><img src="https://agentmods.dev/badge/skills/ericrisco/rsc-harness/django.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00084 | $0.03178 |
| Opus 5 | $0.00042 | $0.01589 |
| Sonnet 5 | $0.00017 | $0.00636 |
| Haiku 4.5 | $0.00008 | $0.00318 |
Grade A, and why
django scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 264 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Django web applications
The single authoritative skill for building, reviewing, securing, testing and shipping a Django app — the batteries-included, ORM-first, request/response Python framework.
Mental model: a Django project is apps composed of fat-but-thin-enough models (domain + query logic on the model/manager), views that orchestrate (FBV/CBV/DRF) and never own SQL, an admin/forms layer, and a settings module split by environment. The ORM, migrations, auth, admin, CSP and the test runner are all first-party. Reach for the framework before you add a dependency.
Pinned stack (2026-06)
- Django 5.2 LTS — the production default. Released 2025-04-02, security fixes until
~April 2028, supports Python 3.10–3.14. New in 5.2: all models auto-imported in
shell,CompositePrimaryKey,BoundFieldcustomization. - Django 6.0 — released 2025-12-03 (non-LTS, ~8 months until 6.1). Choose it only when you
want the new built-in Tasks framework (background jobs without Celery) or native CSP
(
ContentSecurityPolicyMiddleware,SECURE_CSP) and can take the shorter support window. Drops Python 3.10/3.11; supports 3.12–3.14. - Django REST Framework 3.17.1 (2026-03-24) — adds Django 6.0 + Python 3.14 support.
- Python 3.12+,
pytest-django,factory_boy. ruff/uv and type-hint policy live inpython.
Version rule: default to 5.2 LTS. Pick 6.0 only for a concrete Tasks/CSP need, and say so.
Route elsewhere
| Situation | Route to |
|---|---|
Async service, fastapi/pydantic/uvicorn, async SQLAlchemy |
fastapi |
| Postgres schema design, EXPLAIN ANALYZE, indexing strategy, RLS, pooling | postgresdb |
| Cross-stack OWASP/STRIDE threat modeling | secure-coding |
| Container/Compose/CI, gunicorn prod tuning, collectstatic pipeline | deployment |
| REST contract design (cursor vs offset, status codes, versioning) | api-design |
| ruff/uv/general type hints, packaging | python |
Project shape
Split settings by environment; never ship one settings.py toggled by DEBUG.
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 264 lines · 84 tokens per session scan A a4b8e40e1c83
django is a skill published in the GitHub repository ericrisco/rsc-harness (64 stars, last pushed 2d ago), licensed MIT. It adds 84 tokens to every session and 3,178 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
django-expert
Expert-level Django development for robust Python web applications with ORM, admin, and authentication. Use when the user mentions Python, web, ORM, MVC, or Django REST Framework, or when the task involves Django Architecture.
Django Testing Patterns
Django application testing with TestCase, fixtures, factoryboy, model testing, view testing, middleware testing, and Django REST framework testing.
kolo
Kolo is a text-based Python debugger that captures every executed function, return value, local variable, HTTP request, and SQL query into greppable trace files. Use this skill for tricky debugging challenges, to verify that code behaves as expected at runtime, and to see the real data and values passing through the…
python-patterns
Pythonic idioms, PEP 8 standards, type hints, and best practices for building robust, efficient, and maintainable Python applications.
jupyter-notebook
Use when the user asks to create, scaffold, or edit Jupyter notebooks (.ipynb) for experiments, explorations, or tutorials; prefer the bundled templates and run the helper script newnotebook.py to generate a clean starting notebook.
python-package-management
Guide for managing packages in the Agent Framework Python monorepo, including creating new connector packages, versioning, and the lazy-loading pattern. Use this when adding, modifying, or releasing packages.