frappe-api

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill consists of documentation and code snippets for the Frappe Framework API and does not include any functional or malicious executable content.- [COMMAND_EXECUTION]: Documentation includes methods for interacting with the database, such as frappe.db.get_all and raw SQL execution via frappe.db.sql.- [CREDENTIALS_UNSAFE]: Illustrates authentication patterns for the REST API using placeholders for credentials; no actual secrets are exposed.- [PROMPT_INJECTION]: Identifies indirect injection surfaces by documenting methods that process external data (Ingestion: frappe.get_doc(data) in SKILL.md) using powerful framework capabilities (Inventory: frappe.db.sql, frappe.set_user), while also highlighting built-in sanitization utilities like sanitize_html. No boundary markers are used in the illustrative snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 09:34 PM