frappe-tweaks-document-review-expert
Warn
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill facilitates the creation and runtime execution of Python scripts using Frappe's
safe_execenvironment. These scripts are used to define custom validation rules and are triggered automatically during document lifecycle events such ason_changeandbefore_submit. Examples inreferences/script-examples.mddemonstrate the use of dynamic logic for thresholds, item checks, and multi-level approvals. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted document data through the
docvariable injected into the script context. \n - Ingestion points: The
docobject passed toevaluate_document_reviewsinreferences/document-review-system.md. \n - Boundary markers: Absent. \n
- Capability inventory: Scripts have access to the Frappe API, including
frappe.dbqueries andsafe_execfor logic execution. \n - Sanitization: Absent; no specific sanitization of document input data is enforced before processing within custom scripts.
- [COMMAND_EXECUTION]: The documentation provides instructions for executing administrative commands via the
benchCLI and performing direct database queries usingfrappe.db.sqlwithin scripts, as seen inreferences/troubleshooting.mdandreferences/script-examples.md.
Audit Metadata