api-cms-payload
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious instructions, obfuscation, or data exfiltration patterns were detected across the skill files.
- [CREDENTIALS_UNSAFE]: The skill contains no hardcoded secrets and explicitly instructs the use of environment variables for managing database URLs and sensitive keys.
- [PRIVILEGE_ESCALATION]: The skill identifies and provides remediation for a potential privilege escalation vector in the Payload CMS Local API, where access control is bypassed by default unless configured otherwise.
- [REMOTE_CODE_EXECUTION]: No unauthorized remote code execution patterns or unverified external dependencies were identified; all mentioned packages and tools are official and standard for the described framework.
Audit Metadata