frappe-impl-customapp
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate documentation and implementation patterns for the Frappe framework across multiple versions (v14, v15, and v16).
- [SAFE]: It emphasizes security best practices, explicitly warning against SQL injection vulnerabilities in the 'anti-patterns' reference and demonstrating the correct use of
frappe.db.escape()for parameter sanitization. - [SAFE]: Secret management is handled correctly in integration examples, utilizing the framework's secure password retrieval method (
settings.get_password('api_key')) instead of hardcoding sensitive tokens or keys. - [SAFE]: External dependencies mentioned in configuration examples (e.g.,
requests,pandas) are well-known, standard libraries appropriate for the described use cases (API integrations and data processing). - [SAFE]: Command-line examples and installation workflows use standard Frappe 'bench' tooling and placeholder GitHub URLs typical of technical documentation and developer guides.
Audit Metadata