skills/openaec-foundation/erpnext_anthropic_claude_development_skill_package/erpnext-impl-hooks/Gen Agent Trust Hub
erpnext-impl-hooks
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of educational resources and implementation patterns for the Frappe/ERPNext framework. It does not contain executable malicious code or dangerous instructions.
- [SAFE]: Code examples follow security best practices within the Frappe ecosystem, such as using parameterized SQL queries to prevent SQL injection and employing
frappe.db.escape()for safe string handling. - [SAFE]: The skill explicitly includes a section on 'Anti-Patterns' that warns developers against security risks, such as exposing sensitive credentials (API secrets or database passwords) in client-side data structures (
bootinfo). - [SAFE]: All command-line examples use the standard
benchCLI tool for site management tasks like migrations and scheduler management, which are expected operations for the target development environment.
Audit Metadata