frappe-core-utils

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a best-practice guide for using Frappe's built-in utility functions, which are designed to be safer and more robust than standard Python/JavaScript alternatives in a multi-tenant environment.
  • [SAFE]: Provides documentation for security-relevant utilities such as frappe.utils.strip_html and frappe.utils.escape_html for preventing XSS attacks.
  • [SAFE]: Recommends safe data handling practices, such as using frappe.utils.parse_json and frappe.utils.safe_json_loads to prevent crashes on malformed or empty input.
  • [SAFE]: Promotes input validation using built-in functions for emails, URLs, IBANs, and phone numbers.
  • [SAFE]: Respects framework security boundaries by documenting the restricted environment of Frappe Server Scripts where imports are prohibited.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 10:40 AM