frappe-tweaks-open-observe-api-expert
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents legitimate observability integration functionality. It facilitates log transmission and search operations between a Frappe application and an OpenObserve instance. No malicious command execution or unauthorized data access patterns were identified.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill references the official OpenObserve API endpoint (https://api.openobserve.ai). This is consistent with the skill's stated purpose of providing guidance for this specific service. The documentation appropriately advises using Frappe's internal encryption for storing API credentials and limiting access to the System Manager role.
- [COMMAND_EXECUTION]: The skill describes administrative functions like
send_logsandsearch_logsbeing available in Frappe's server script environment. The documentation explicitly states these require System Manager permissions, which is a standard and secure practice for extending platform capabilities.
Audit Metadata