skills/openaec-foundation/erpnext_anthropic_claude_development_skill_package/erpnext-syntax-hooks/Gen Agent Trust Hub
erpnext-syntax-hooks
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of markdown files containing documentation, decision trees, and code examples for the Frappe/ERPNext framework. No executable scripts or malicious patterns were identified.
- [SAFE]: The documentation actively promotes security best practices. For example, in
references/permissions.md, it identifies unsanitized SQL queries as an anti-pattern and provides the correct implementation usingfrappe.db.escape()to prevent SQL injection. - [SAFE]: The skill includes explicit warnings against exposing sensitive data such as API keys or secrets in the
extend_bootinfohook, which sends data to the client-side environment. - [SAFE]: Several files (
references/events.md,references/hooks.md,references/methods.md,references/patterns.md, andreferences/syntax.md) contain placeholder text representing GitHub API 404 errors. While this indicates a possible error in the skill's assembly, the content itself is non-executable and benign.
Audit Metadata