n8n
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/check-updates.pyutility fetches metadata from the official npm registry atregistry.npmjs.orgto compare the tracked version with the latest available release. This is a standard documentation maintenance task targeting a whitelisted domain. - [COMMAND_EXECUTION]: The
SKILL.mdandreferences/00-overview.mdfiles provide standard installation and startup commands for the n8n platform, includingnpx n8n,npm install n8n -g, anddocker run. These are intended for user-guided setup of the official software. - [INDIRECT_PROMPT_INJECTION]: The skill documents an automation platform that is designed to ingest untrusted data from external sources.
- Ingestion points: External data enters the context through
references/02-triggers-and-webhooks.md(Webhook Triggers) andreferences/06-http-request-and-apis.md(HTTP Request responses). - Boundary markers: The skill documentation mentions the use of
System Messagesinreferences/09-ai-agents-and-tools.mdto guide agent behavior when processing input. - Capability inventory: The platform supports arbitrary code execution via the Code node (
references/05-code-node.md), network requests (references/06-http-request-and-apis.md), and file system operations. - Sanitization: As documented in
references/07-credentials-and-security.md, the platform provides built-in SSRF (Server-Side Request Forgery) protection, credential encryption at rest, and domain restrictions to mitigate the risks of processing untrusted data.
Audit Metadata