erpnext-impl-controllers

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides educational examples for integrating with external services using the Python requests library (e.g., https://api.external.com/products in references/examples.md). These are standard integration patterns for the platform.
  • [COMMAND_EXECUTION]: Documentation outlines the use of the frappe.enqueue system for background task execution and the @frappe.whitelist decorator for exposing methods to client-side calls.
  • [DATA_EXFILTRATION]: Code patterns demonstrate how to manage and send API keys to external endpoints using secure practices, such as retrieving secrets from the database rather than hardcoding them.
  • [COMMAND_EXECUTION]: The skill describes the use of document flags like ignore_permissions, which allows the backend to perform actions that bypass standard user-level permission checks. This is documented as a standard framework feature for system-generated tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 05:37 PM