frappe-impl-integrations
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content for implementing OAuth, webhooks, and API integrations within the Frappe ecosystem.
- [SAFE]: It includes a dedicated section on security anti-patterns, specifically advising against hardcoding API keys and exposing secrets in client-side code.
- [SAFE]: The provided code examples for handling inbound webhooks demonstrate secure practices by including HMAC signature verification to prevent unauthorized data injection.
- [SAFE]: Command-line examples utilize the
benchutility, which is the standard management tool for Frappe, and are used appropriately for data export tasks. - [SAFE]: All external URL references in examples point to well-known services (e.g., Google, Slack, Grafana) or use generic placeholders, posing no risk of data exfiltration to malicious domains.
Audit Metadata