frappe-core-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the standard Frappe Workflow engine, focusing on state machine configuration and lifecycle management within the Frappe framework.\n- [SAFE]: Security best practices are explicitly covered, particularly in the anti-patterns guide which warns against bypassing workflow validation, decreasing docstatus, and allowing self-approval in sensitive contexts (Anti-Pattern 7).\n- [SAFE]: The use of dynamic execution through
frappe.safe_evalis documented as a core architectural feature for transition conditions, with restricted globals provided for sandboxing as per framework standards.\n- [SAFE]: Administrative context usage (frappe.set_user('Administrator')) is limited to unit testing examples to demonstrate permission verification, accompanied by instructions to reset the session.
Audit Metadata