payload
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides extensive security guidance, explicitly warning about common pitfalls such as Local API access control bypass and transaction atomicity failures in hooks.\n- [SAFE]: External links and package references target official Payload CMS documentation and repositories, which are recognized as trusted vendor resources.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to analyze and assist with project source code (e.g.,
payload.config.ts).\n - Ingestion points: Project source files, collection configurations, and hook implementations.\n
- Boundary markers: None explicitly defined in the provided reference materials.\n
- Capability inventory: The skill describes patterns for file system interaction and terminal command execution (e.g.,
npx,pnpm dev).\n - Sanitization: Not applicable as the skill serves as a reference for developer guidance rather than an automated data processing pipeline.
Audit Metadata