payload
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- EXTERNAL_DOWNLOADS (SAFE): The skill references source code from the official Payload CMS GitHub repository (github.com/payloadcms/payload) to provide the agent with detailed type signatures. These are informational fetches intended for documentation context and do not involve remote code execution.\n- CREDENTIALS_UNSAFE (SAFE): Configuration examples for databases and storage adapters correctly utilize environment variables (e.g.,
process.env.DATABASE_URL,process.env.S3_SECRET_ACCESS_KEY) rather than hardcoded credentials.\n- COMMAND_EXECUTION (SAFE): No dangerous shell commands, arbitrary code execution patterns, or restricted system access operations were identified in the reference materials.
Audit Metadata