printing-templates

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The documentation exposes server-side template APIs (frappe.get_all which ignores permissions), session tokens/values, and server-side PDF/email functions (frappe.get_print/attach_print/sendmail) that can be combined in a template to stealthily collect and exfiltrate sensitive data — high risk for abuse though the files themselves are documentation.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path uses Frappe Jinja for rendering user-configured Print Formats/Email Templates (DB-stored/custom HTML) that can ingest attacker-controlled text from documents the workflow prints/emails, and templates can additionally call whitelisted data-fetching functions like frappe.get_all/frappe.get_list while rendering.