frappe-impl-clientscripts

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were identified across the 10 threat categories. The skill content consists entirely of developer documentation and best practices for the Frappe/ERPNext ecosystem.
  • [COMMAND_EXECUTION]: The documentation references standard framework development commands such as bench build and bench watch. These are used appropriately within the context of migrating client scripts to a formal application structure.
  • [DATA_EXFILTRATION]: The code examples utilize standard internal framework APIs for data fetching and server-side validation, such as frappe.call, frappe.db.get_value, and frappe.xcall. One example uses frappe.realtime for UI collaboration indicators, which is an expected feature within the Frappe framework.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns or downloads from untrusted sources were detected. All code snippets provided are static templates intended for local implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 11:52 AM