frappe-impl-hooks
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical guide for the Frappe framework. It provides developers with step-by-step workflows, decision trees, and code examples for implementing hooks (lifecycle events, scheduled tasks, permissions, etc.).
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscated code were detected. The skill includes a dedicated 'Anti-Patterns' document that explicitly warns against security risks, such as exposing sensitive data (secrets/passwords) in the client-side boot configuration.
- [SAFE]: All shell commands provided (e.g., 'bench migrate', 'bench build') are standard CLI operations within the Frappe ecosystem and are intended for the developer to use in their local environment. No unauthorized remote code execution patterns or hidden backdoors were found.
- [SAFE]: Code examples follow security best practices, such as using parameterized queries in database calls and correctly calling parent class methods (super()) to maintain system integrity.
Audit Metadata