n8n-marketing-flows

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s required runtime workflow can ingest outsider-authored free text via its “Free local” templates that read and scrape public sources (e.g., RSS/news feeds and PTT scraping) and then pass that fetched page/post text into an LLM node for summarization/generation.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit ad-management API calls (Meta/Graph API) that perform state-changing actions affecting spend. Example: the "Auto-Pause Low-Performing Ads" workflow shows an HTTP POST to https://graph.facebook.com/.../{{ $json.adId }} with {"status": "PAUSED", "access_token": ...}, and the project contains Meta Marketing API skeletons for ad management. These are concrete, non-generic APIs that can change ad status/controls and thus directly affect ad spend, meeting the "direct financial execution" criteria.