n8n-code-python
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and provides best practices for developing Python scripts in the n8n automation environment. It focuses on safety and reliability, specifically warning users about the top 5 common errors including dictionary access and return format requirements.
- [EXTERNAL_DOWNLOADS]: The skill repeatedly and explicitly states that external libraries (like requests, pandas, or numpy) are not available in the n8n environment and warns users against attempting to import them.
- [CREDENTIALS_UNSAFE]: While some code examples demonstrate how to handle credentials (e.g., creating a Basic Auth header or hashing a password), they use dummy placeholder values like 'admin' and 'secret123' for demonstration purposes only. It also encourages the use of .env files for real secret management.
- [DATA_EXFILTRATION]: No exfiltration patterns were found. The skill documents how to process data within the n8n sandbox and correctly identifies that network requests should be handled via the platform's native HTTP Request node or JavaScript helpers rather than Python scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest data from untrusted sources such as webhooks (e.g.,
_json['body']). It mitigates risks by teaching defensive coding patterns like using the.get()method for safe dictionary access and implementing validation checks on incoming data.
Audit Metadata