frappe-tweaks-sync-job-expert
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill describes a framework that processes data from Frappe DocTypes through Python controllers, representing an indirect prompt injection surface.
- Ingestion points: The framework ingests untrusted data via
source_doc, a user-providedcontextdictionary, andtriggered_by_docmetadata (documented inreferences/enqueueing.md). - Boundary markers: There is no evidence of boundary markers or instructions to the agent to ignore embedded commands within the processed data.
- Capability inventory: The framework allows for database writes (
target_doc.save()), child job creation, and arbitrary Python execution. "Bypass Mode" specifically enables network operations via libraries likerequests(as shown inreferences/implementation.md). - Sanitization: The implementation guide does not mandate or describe specific sanitization techniques for the input data before it is used in logic or written to targets.
Audit Metadata