Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rishapgandhi/python-skills --skill drfgit clone --depth 1 https://github.com/rishapgandhi/python-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rishapgandhi/python-skills/drf)<a href="https://agentmods.dev/skills/rishapgandhi/python-skills/drf"><img src="https://agentmods.dev/badge/skills/rishapgandhi/python-skills/drf/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rishapgandhi/python-skills/drf"><img src="https://agentmods.dev/badge/skills/rishapgandhi/python-skills/drf.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.03361 |
| Opus 5.5 | $0.00000 | $0.01344 |
| Sonnet 5.5 | $0.00000 | $0.00672 |
| Haiku 4.5 | $0.00000 | $0.00336 |
Grade A, and why
drf scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 537 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Django REST Framework (DRF) Skill
Load alongside
skills/django/SKILL.mdand allskills/common/files.
Stack Additions (on top of Django)
| Layer | Library |
|---|---|
| REST Framework | djangorestframework 3.15+ |
| JWT Auth | djangorestframework-simplejwt |
| Filtering | django-filter |
| Throttling | DRF built-in |
| Schema / Docs | drf-spectacular (OpenAPI 3) |
| Pagination | DRF built-in + custom |
Settings
# config/settings/base.py
REST_FRAMEWORK = {
"DEFAULT_AUTHENTICATION_CLASSES": [
"rest_framework_simplejwt.authentication.JWTAuthentication",
],
"DEFAULT_PERMISSION_CLASSES": [
"rest_framework.permissions.IsAuthenticated",
],
"DEFAULT_RENDERER_CLASSES": [
"rest_framework.renderers.JSONRenderer",
],
"DEFAULT_PAGINATION_CLASS": "apps.core.pagination.StandardResultsPagination",
"PAGE_SIZE": 20,
"DEFAULT_FILTER_BACKENDS": [
"django_filters.rest_framework.DjangoFilterBackend",
"rest_framework.filters.SearchFilter",
"rest_framework.filters.OrderingFilter",
],
"DEFAULT_THROTTLE_CLASSES": [
"rest_framework.throttling.AnonRateThrottle",
"rest_framework.throttling.UserRateThrottle",
],
"DEFAULT_THROTTLE_RATES": {
"anon": "100/day",
"user": "1000/day",
},
"EXCEPTION_HANDLER": "apps.core.exception_handler.custom_exception_handler",
}
Serializer Standards
# apps/users/serializers.py
from rest_framework import serializers
from apps.users.models import User
class UserCreateSerializer(serializers.ModelSerializer):
"""Serializer for creating a new user account."""
password = serializers.CharField(write_only=True, min_length=8)
class Meta:
model = User
fields = ["email", "name", "password"]
extra_kwargs = {"password": {"write_only": True}}
def validate_email(self, value: str) -> str:
if User.objects.filter(email=value.lower()).exists():
raise serializers.ValidationError("Email already in use.")
return value.lower()
def create(self, validated_data: dict) -> User:
from apps.users.services import UserService
return UserService.create_user(**validated_data)
class UserResponseSerializer(serializers.ModelSerializer):
"""Read-only serializer for user responses."""
class Meta:
model = User
fields = ["id", "public_id", "email", "name", "is_active", "created_at"]
read_only_fields = fields
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 537 lines · 0 tokens per session scan A 6f35df8c9602
drf is a skill published in the GitHub repository rishapgandhi/python-skills (4 stars, last pushed 5mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 3,361 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
supabase-python
FastAPI with Supabase and SQLAlchemy/SQLModel.
fastapi
Use when building, reviewing, testing, securing or shipping a FastAPI / async Python service — routers, Pydantic v2 schemas, dependency injection, async SQLAlchemy 2.0, OAuth2/JWT, ASGITransport tests, production wiring. NOT language-level Python or packaging (that is python), NOT engine-level SQL (that is…
django
Use when building, reviewing, securing, testing or shipping a Django app — models, migrations, QuerySets/managers, FBV/CBV views, forms, the admin, settings split, and Django REST Framework (serializers, ModelViewSet, permissions). NOT async FastAPI/Pydantic services (that is fastapi), NOT Postgres schema/index work…
beautifulsoup-parsing
Expert guidance for HTML/XML parsing using BeautifulSoup in Python with best practices for DOM navigation, data extraction, and efficient scraping workflows.
odoo-development
Expert guidance for Odoo ERP development including Python ORM, XML views, and module architecture.
rest-api-django
Comprehensive guidelines for Django REST API development covering project structure, views, models, serializers, authentication, performance, and error handling.