frappe-core-files
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive reference guide for the Frappe framework's file management system, documenting standard APIs such as
save_file,save_url, andget_filefor legitimate development tasks. - [SAFE]: The documentation includes a dedicated security section (
anti-patterns.md) that proactively instructs developers on how to prevent path traversal attacks usingget_file_path()and how to avoid unauthorized data exposure by correctly utilizing theis_privateflag. - [SAFE]: All code examples and configuration patterns use industry-standard placeholders for sensitive data (e.g.,
AKIA...for AWS keys andapi_key:api_secretfor authentication), ensuring no actual credentials are leaked. - [SAFE]: No malicious patterns such as obfuscation, remote code execution, or unauthorized data exfiltration were detected. The skill's behavior is entirely consistent with its stated purpose of providing technical documentation.
Audit Metadata