app-development
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a service-layer architecture that separates business logic from API handlers, reducing the attack surface. It provides built-in utilities for permission checks (
require_permission) and input validation (require_fields) inassets/mini-app-template/your_app/utils/. - [SAFE]: The provided database reporting example in
assets/mini-app-template/your_app/report/sample_report/sample_report.pycorrectly utilizes the Frappe Query Builder (frappe.qb) to prevent SQL injection vulnerabilities by avoiding raw SQL strings. - [SAFE]: The integration connector example in
assets/mini-app-template/your_app/integrations/sample_connector.pydemonstrates safe usage of therequestslibrary with defined timeouts and proper error handling, targeting a placeholder domain (example.com).
Audit Metadata