skills/openaec-foundation/erpnext_anthropic_claude_development_skill_package/erpnext-api-patterns/Gen Agent Trust Hub
erpnext-api-patterns
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational reference for developers working with ERPNext/Frappe APIs. All provided code snippets are instructional.
- [SAFE]: Actively promotes security best practices through an 'anti-patterns' guide, specifically warning against SQL injection, hardcoded credentials, and lack of permission checks.
- [SAFE]: Uses generic placeholders (e.g., 'api_key:api_secret', 'your-secret') in all code examples involving authentication or sensitive configurations.
- [SAFE]: Instructs users on secure secret management, such as using environment variables or the platform's site_config.json instead of hardcoding keys in source code.
- [SAFE]: No patterns of prompt injection, data exfiltration, or unauthorized command execution were detected.
- [SAFE]: Several files in the references directory contain 404 error responses from the GitHub API; while these indicate broken links in the skill content, they pose no security risk.
Audit Metadata