Security audit
pipeline-architecture
Security checks for vulnerabilities and agentic risk
Overview
This is a documentation-only architecture skill with clearly scoped guidance and explicit safety warnings around writes, authorization, and external side effects.
Install this skill only for projects that intentionally use this pipeline architecture. Pay particular attention when applying the Payload CMS and non-database write guidance, because authorization steps, repository or path whitelists, and external side-effect handling are required for safe use.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.