frappe-core-files

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a comprehensive reference guide for the Frappe framework's file management system, documenting standard APIs such as save_file, save_url, and get_file for legitimate development tasks.
  • [SAFE]: The documentation includes a dedicated security section (anti-patterns.md) that proactively instructs developers on how to prevent path traversal attacks using get_file_path() and how to avoid unauthorized data exposure by correctly utilizing the is_private flag.
  • [SAFE]: All code examples and configuration patterns use industry-standard placeholders for sensitive data (e.g., AKIA... for AWS keys and api_key:api_secret for authentication), ensuring no actual credentials are leaked.
  • [SAFE]: No malicious patterns such as obfuscation, remote code execution, or unauthorized data exfiltration were detected. The skill's behavior is entirely consistent with its stated purpose of providing technical documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 09:39 AM
Security Audit — agent-trust-hub — frappe-core-files