frappe-syntax-hooks
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Technical Documentation: The skill provides legitimate reference material for the Frappe framework's hook system, covering app metadata, frontend asset injection, scheduler events, and request lifecycle management.
- [SAFE]: Security Best Practices: The instructions actively promote secure coding practices, such as preventing SQL injection through the use of
frappe.db.escape()and protecting sensitive data by warning against placing secrets in client-side boot information. - [SAFE]: No Malicious Patterns: A systematic review across all threat categories—including prompt injection, obfuscation, data exfiltration, and persistence—yielded no suspicious findings.
- [SAFE]: Dependency Integrity: The skill does not request the installation of external packages or execution of remote scripts from untrusted sources. Mentioned tools (like
bench) are standard for the Frappe environment.
Audit Metadata