studio-app-building
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The documentation specifies that 'Studio Page.script' fields and component 'handler props' (defined as arrow-function strings) are executed at runtime by the Frappe Studio platform to handle logic and events. This is a core architectural feature of the documented development environment.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an interface for ingesting data into the application context. (1) Ingestion points: Data is retrieved through 'Studio Page.resources' as defined in SKILL.md. (2) Boundary markers: The instructions do not prescribe specific delimiters or boundary markers for ingested data. (3) Capability inventory: Application scripts have access to platform tools including 'call' for backend interactions, 'router' for navigation, and 'socket' for network communication (SKILL.md). (4) Sanitization: No explicit sanitization or escaping procedures are mentioned in the provided instructions.
Audit Metadata