skills/openaec-foundation/erpnext_anthropic_claude_development_skill_package/frappe-syntax-jinja/Gen Agent Trust Hub
frappe-syntax-jinja
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill consists of documentation and reference materials for Frappe Jinja templates.
- [SAFE]: The skill includes dedicated sections on security best practices in
references/anti-patterns.md. Specifically, it addresses AP-02 (Unescaped User Input) to prevent XSS and AP-09 (Disabling safe_render) to prevent code injection via Python internal access. - [SAFE]: No remote code execution patterns or unverified external dependencies were found. The skill configuration mentions standard Frappe v16 PDF engine settings (Chrome) which is a local system configuration.
- [SAFE]: Data handling patterns described, such as
frappe.db.get_valueandfrappe.get_all, are standard whitelisted operations within the Frappe framework's sandbox for Jinja templates.
Audit Metadata