Skills
skills/openaec-foundation/frappe_claude_skill_package/frappe-impl-customapp/Gen Agent Trust Hub

frappe-impl-customapp

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides educational content and implementation workflows for the Frappe framework.
  • [DATA_EXPOSURE]: The examples demonstrate secure handling of credentials using the built-in get_password method and advice against hardcoding secrets in code.
  • [COMMAND_EXECUTION]: All shell commands provided (e.g., bench new-app, bench migrate) are standard administrative tools for the Frappe framework and are used as intended for development workflows.
  • [REMOTE_CODE_EXECUTION]: Dependencies listed in pyproject.toml examples (e.g., requests, pandas) are standard, well-known Python packages from official registries. No unverified remote code execution or curl | bash patterns were found.
  • [PROMPT_INJECTION]: No malicious prompt injection or behavior override patterns were detected in the instructions. The content focus is strictly on technical implementation of software features.
  • [COMMAND_EXECUTION]: The skill correctly identifies and warns against common security risks such as SQL injection, providing correct sanitization patterns using frappe.db.escape and parameterized queries.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 10:40 AM