n8n-code-javascript
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of educational markdown files designed to guide an AI agent in assisting users with n8n JavaScript development. It contains no executable code or malicious instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for processing untrusted external data, such as webhook payloads and API responses. While this represents a potential attack surface, the instructions specifically emphasize and provide code examples for mitigation strategies, including input validation, safe property access using optional chaining, and comprehensive error handling via try-catch blocks.
- [EXTERNAL_DOWNLOADS]: The documentation references official resources for n8n and the Luxon library. These references are for documentation purposes only and do not involve the automated download or execution of remote scripts.
- [DATA_EXPOSURE]: Examples provided in the documentation use standard placeholders for API keys and tokens (e.g.,
$env.API_KEY,'Bearer token123'). No hardcoded credentials or sensitive system paths are exposed.
Audit Metadata