skills/openaec-foundation/erpnext_anthropic_claude_development_skill_package/frappe-errors-serverscripts/Gen Agent Trust Hub
frappe-errors-serverscripts
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Evaluated sandbox security instructions. The skill correctly identifies and warns against common sandbox escape attempts (such as blocked imports and restricted built-ins) and provides secure framework-native alternatives using the
frappeAPI. - [SAFE]: Evaluated SQL injection prevention guidelines. The skill provides accurate technical instructions for using
frappe.db.escape()and parameterized queries to handle untrusted user input safely, mitigating database-level risks. - [SAFE]: Evaluated data handling patterns. The provided templates for API scripts and Scheduler events emphasize input validation, record existence checks, and proper exception handling (e.g., using
frappe.throw()) to ensure robust and secure execution logic. - [SAFE]: No malicious obfuscation, prompt injection, or unauthorized network operations were detected. All external URLs and mentions of system configuration (
site_config.json) are used in an educational, placeholder, or standard administrative context.
Audit Metadata