Payload Cms

• Outcome: Review
• Latest audit: May 29, 2026 at 9:38 PM UTC
• Version:
  1.0.3

Overview

The skill is a coherent Payload CMS integration, but it gives agents broad authenticated API write and delete capability without explicit safety guardrails.

Install only if you are comfortable letting the agent operate through Membrane against your Payload CMS. Use a least-privileged CMS account where possible, prefer discovered Membrane actions over raw proxy calls, and require explicit review before creating, editing, publishing, or deleting CMS content.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 88% confidence
• Finding: The skill explicitly documents raw proxy requests with support for destructive HTTP methods like POST, PUT, PATCH, and DELETE, but provides no guardrails about confirmation, scoping, or dry-run/read-only preference. In an agent setting, this increases the risk of unintended modification or deletion of CMS data because the agent is empowered to act directly against the API with authenticated access.

VirusTotal

65/65 vendors flagged this skill as clean.