frappe-api
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists of documentation and code snippets for the Frappe Framework API and does not include any functional or malicious executable content.- [COMMAND_EXECUTION]: Documentation includes methods for interacting with the database, such as
frappe.db.get_alland raw SQL execution viafrappe.db.sql.- [CREDENTIALS_UNSAFE]: Illustrates authentication patterns for the REST API using placeholders for credentials; no actual secrets are exposed.- [PROMPT_INJECTION]: Identifies indirect injection surfaces by documenting methods that process external data (Ingestion:frappe.get_doc(data)in SKILL.md) using powerful framework capabilities (Inventory:frappe.db.sql,frappe.set_user), while also highlighting built-in sanitization utilities likesanitize_html. No boundary markers are used in the illustrative snippets.
Audit Metadata