skills/openaec-foundation/frappe_claude_skill_package/frappe-syntax-serverscripts/Gen Agent Trust Hub
frappe-syntax-serverscripts
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for developing Frappe Server Scripts. It promotes security best practices by warning against SQL injection and encouraging the use of parameterized queries (e.g., in references/anti-patterns.md).
- [SAFE]: It correctly identifies and warns against dangerous Python built-ins that are blocked by the Frappe sandbox, such as eval, exec, open, and import.
- [SAFE]: Examples involving network requests (frappe.make_get_request) or database updates are provided for educational purposes within the context of the platform's API and use placeholder domains.
- [SAFE]: No malicious patterns such as prompt injection, hardcoded credentials, obfuscation, or unauthorized remote code execution were detected.
Audit Metadata