frappe-app-dev
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes security best practices within the Frappe Framework, specifically advising developers to use Python type hints in whitelisted API methods to enforce data validation and prevent type-confusion vulnerabilities.
- [SAFE]: Database interaction guidelines recommend using the framework's ORM and the
frappe.qbquery builder instead of raw SQL queries, which effectively mitigates the risk of SQL injection. - [SAFE]: Instructions for permissions management include explicit warnings against bypassing system checks (e.g., using
ignore_permissions) in user-facing code, emphasizing that such overrides should be reserved for specific server-side background tasks. - [SAFE]: Application lifecycle operations, such as creating sites and apps, are performed using standard
benchCLI commands. The skill provides clear workflows for handling site configuration and credentials securely within the local environment.
Audit Metadata