frappe-impl-controllers
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill content is strictly technical documentation and code examples for Frappe framework development.
- [COMMAND_EXECUTION]: The skill mentions standard bench commands (e.g.,
bench restart,bench run-tests) necessary for the Frappe development lifecycle. - [CREDENTIALS_UNSAFE]: The documentation explicitly advises against hardcoding sensitive values (AP-12) and demonstrates how to securely retrieve configuration and API keys from a dedicated Settings DocType.
- [DATA_EXFILTRATION]: Examples demonstrate network operations using the
requestslibrary and email notifications usingfrappe.sendmail. These are presented as standard business logic for integrations and notifications, following secure practices by sourcing credentials from internal settings. - [PROMPT_INJECTION]: No patterns attempting to override agent instructions or bypass safety guidelines were found.
Audit Metadata