n8n-clay-integration
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes a setup command 'npx -y @coldiq/mcp@latest' which downloads and executes a package from the npm registry to enable the author's MCP functionality.
- [EXTERNAL_DOWNLOADS]: Installation of the integration components involves fetching the '@coldiq/mcp' node package from the official npm registry.
- [COMMAND_EXECUTION]: The skill instructs the user to execute shell commands using 'npx' to initialize the environment.
- [PROMPT_INJECTION]: The skill establishes a data ingestion surface through webhook integration between n8n and Clay. While no active injection was found, it lacks boundary markers to delimit untrusted data payloads processed by the agent. The capabilities involve performing HTTP requests which could be triggered by incoming data.
Audit Metadata