frappe-core-utils
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a best-practice guide for using Frappe's built-in utility functions, which are designed to be safer and more robust than standard Python/JavaScript alternatives in a multi-tenant environment.
- [SAFE]: Provides documentation for security-relevant utilities such as
frappe.utils.strip_htmlandfrappe.utils.escape_htmlfor preventing XSS attacks. - [SAFE]: Recommends safe data handling practices, such as using
frappe.utils.parse_jsonandfrappe.utils.safe_json_loadsto prevent crashes on malformed or empty input. - [SAFE]: Promotes input validation using built-in functions for emails, URLs, IBANs, and phone numbers.
- [SAFE]: Respects framework security boundaries by documenting the restricted environment of Frappe Server Scripts where imports are prohibited.
Audit Metadata