frappe-impl-serverscripts
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the
benchcommand-line utility to modify system configurations, such as enabling server scripts viabench set-config server_script_enabled true. - [DATA_EXFILTRATION]: The documentation includes patterns for making external HTTP requests using the Frappe framework's sandbox-safe methods (
frappe.make_get_requestandfrappe.make_post_request). No suspicious or hardcoded destination URLs are present. - [PROMPT_INJECTION]: The skill implements logic that handles untrusted data from the
frappe.form_dictobject. It demonstrates effective mitigation of indirect prompt injection risks by providing examples that include explicit permission checks (frappe.has_permission), role verification (frappe.get_roles), and input sanitization through parameterized SQL queries and type conversion.
Audit Metadata