erpnext-errors-api

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • Prompt Injection (SAFE): No instructions found that attempt to override agent behavior or bypass safety guidelines.
  • Data Exposure & Exfiltration (SAFE): No hardcoded credentials or unauthorized network operations. Use of API keys in code snippets follows standard variable-based patterns.
  • Obfuscation (SAFE): No hidden or encoded content detected.
  • Unverifiable Dependencies & Remote Code Execution (SAFE): References standard libraries (requests) and framework-specific methods without unsafe remote execution.
  • Indirect Prompt Injection (SAFE): The skill documentation provides patterns for data ingestion but focuses on defensive programming. 1. Ingestion points: bulk_update(items) and update_status(docname) in SKILL.md. 2. Boundary markers: None. 3. Capability inventory: Database writes (doc.save) and external API calls (requests.post). 4. Sanitization: Examples demonstrate input validation through conditional checks and framework exceptions.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:09 PM