frappe-impl-reports
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides technical documentation and code examples for report generation in the Frappe framework without any malicious behaviors such as exfiltration or unauthorized command execution.
- [SAFE]: The documentation actively promotes secure coding practices. Specifically, in 'references/anti-patterns.md' (AP-5), it warns against SQL injection via string concatenation and demonstrates the correct use of parameterized queries with dict-based placeholders.
- [SAFE]: The skill uses standard Frappe API calls (such as frappe.db.sql, frappe.whitelist, and frappe.get_cached_value) within their intended context for data retrieval and reporting. There are no signs of hardcoded credentials or access to sensitive local file paths.
Audit Metadata