skills/impertio-studio/frappe_claude_skill_package/frappe-syntax-jinja/Snyk

frappe-syntax-jinja

Warn

Audited by Snyk on Jun 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.65). Portal pages (www/*.html + .py controller) render Jinja with frappe.form_dict (URL query parameters) and frappe.session.user into the template context, so attacker-controlled free text from URL parameters can be ingested into the LLM context via template rendering.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 25, 2026, 11:32 AM

Issues

1

Security Audit — snyk — frappe-syntax-jinja