erpnext-syntax-hooks

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists exclusively of markdown files containing documentation, decision trees, and code examples for the Frappe/ERPNext framework. No executable scripts or malicious patterns were identified.
  • [SAFE]: The documentation actively promotes security best practices. For example, in references/permissions.md, it identifies unsanitized SQL queries as an anti-pattern and provides the correct implementation using frappe.db.escape() to prevent SQL injection.
  • [SAFE]: The skill includes explicit warnings against exposing sensitive data such as API keys or secrets in the extend_bootinfo hook, which sends data to the client-side environment.
  • [SAFE]: Several files (references/events.md, references/hooks.md, references/methods.md, references/patterns.md, and references/syntax.md) contain placeholder text representing GitHub API 404 errors. While this indicates a possible error in the skill's assembly, the content itself is non-executable and benign.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 05:38 PM