n8n
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: Analysis of the skill instructions and code snippets reveals no malicious patterns. The skill follows security best practices by recommending environment variables for API keys and encryption secrets rather than hardcoding them.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing external data via webhooks (an ingestion point for untrusted data), it includes clear instructions for validation and normalization (e.g., event ID extraction and filtering) to mitigate the risk of processing malicious inputs.
- [COMMAND_EXECUTION]: The provided CLI snippets for workflow activation use environment variables ($N8N_API_KEY) for authentication, which is the standard safe practice for automation tooling and CI/CD pipelines.
Audit Metadata