payload

Pass

Audited by Runlayer on Feb 26, 2026

Risk Level: LOW
Scan Summary
Max Score
72%
Files
13
Flagged
3
Chunks
26
Flagged Files (3)
payload/reference/ENDPOINTS.mdLOW
71.6%

Tool passed security scan

Malicious tool definition detected

Tool: payload/reference/ENDPOINTS.md [2/2] Description: result = await req.payload.login({ collection: 'users', data: { email, password }, }) return Response.json(result, { headers: headersWithCors({ headers: new Headers({ 'Set-Cookie': generatePayloadCookie({ collectionAuthConfig: req.payload.config.collections.find((c) => c.slug === 'users') .auth, cookiePrefix: req.payload.config.cookiePrefix, token: result.token, }), }), req, }), }) }, } ``` ### Webhook Handler (Stripe) From `packages/plugin

payload/reference/PLUGIN-DEVELOPMENT.mdLOW
71.3%

Tool passed security scan

Malicious tool definition detected

Create `dev/.env` from `.env.example`: ```bash DATABASE_URL=mongodb://127.0.0.1/plugin-dev PAYLOAD_SECRET=your-secret-here ``` 2.

payload/reference/ACCESS-CONTROL-ADVANCED.mdLOW
54.7%

Tool passed security scan

Passed Files (10)Click to expand
payload/reference/ADVANCED.mdOK
42.7%

Tool passed security scan

payload/SKILL.mdOK
35.7%

Tool passed security scan

payload/reference/ADAPTERS.mdOK
21.8%

Tool passed security scan

payload/reference/ACCESS-CONTROL.mdOK
20.5%

Tool passed security scan

payload/reference/FIELDS.mdOK
16.9%

Tool passed security scan

payload/README.mdOK
6.6%

Tool passed security scan

payload/reference/QUERIES.mdOK
4.6%

Tool passed security scan

payload/reference/FIELD-TYPE-GUARDS.mdOK
4.3%

Tool passed security scan

payload/reference/HOOKS.mdOK
2.0%

Tool passed security scan

payload/reference/COLLECTIONS.mdOK
1.9%

Tool passed security scan

Audit Metadata
Max File Score
72%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
13
Files Flagged
3
Chunks Analyzed
26
Analyzed
Feb 26, 2026, 05:03 PM
Security Audit — runlayer — payload