frappe-core-api
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference guide and does not contain any executable malicious code or instructions to bypass safety guidelines.
- [SAFE]: Code examples consistently demonstrate security best practices, such as using parameterized SQL queries to prevent injection attacks and loading credentials from environment variables or configuration files.
- [SAFE]: The skill includes a dedicated 'Anti-Patterns' section that explicitly warns against dangerous practices like hardcoding secrets, skipping permission checks, and using 'allow_guest' on state-changing endpoints.
- [SAFE]: Authentication flows for Token, OAuth 2.0, and Session-based methods are described using generic placeholders and standard libraries without exposing real credentials.
- [SAFE]: Webhook documentation correctly emphasizes the importance of verifying HMAC signatures using a shared secret to ensure data integrity and authenticity.
Audit Metadata