The Agent Skills Directory

[SAFE]: No malicious patterns or security risks were identified. The skill focuses on providing educational content and secure implementation patterns for the Frappe framework.
[CREDENTIALS_UNSAFE]: The documentation uses illustrative placeholders for sensitive configuration fields, such as S3_ACCESS_KEY, S3_SECRET_KEY, and API tokens (api_key:api_secret). No actual secrets or credentials are hardcoded.
[COMMAND_EXECUTION]: Code snippets use standard framework APIs (frappe.get_file, save_file, delete_doc) for file operations. No dangerous or arbitrary command execution patterns were found.
[EXTERNAL_DOWNLOADS]: The save_url method is documented as a built-in framework utility for fetching remote assets. The examples provided use generic, non-suspicious URLs (e.g., example.com).
[DATA_EXFILTRATION]: No patterns of sensitive data exfiltration were detected. The skill specifically highlights the importance of using is_private=1 to protect sensitive documents from public access.

frappe-core-files