frappe-app-include-js
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard practices for Frappe framework development, including registering assets in hooks.py and using the
frappe.provideand$.extendpatterns for namespacing. No malicious patterns or security vulnerabilities were identified in the provided templates. - [DATA_EXFILTRATION]: While the skill uses
frappe.callandfrappe.realtimefor network communication, these are standard framework mechanisms for interacting with the application server. The skill correctly encourages wrapping these calls in named functions to centralize interaction with whitelisted backend methods. - [REMOTE_CODE_EXECUTION]: No patterns for remote code execution or unauthorized package installations were detected. The skill focuses entirely on client-side JavaScript structure and standard asset pipeline configuration.
Audit Metadata