payload

skills-sh:payloadcms_skills__payload

B

75/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

1

Score

75/100

CRITICAL 1

Findings (1)

CRITICAL NLP_OVERRIDE_DANGEROUS prompt-injection L1

overrideAccess: false - When operating on behalf of a user (API routes, webhooks)