n8n-triggers-webhooks
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using
npx -y @coldiq/mcp@latestto connect to the author's Model Context Protocol tool. This command downloads and executes a package from the official vendor namespace on the NPM registry. - [PROMPT_INJECTION]: The skill designs workflows that ingest data from external sources such as webhooks and application events (e.g., HubSpot, Gmail). This establishes an entry point for third-party data into the agent's context.
- Ingestion points: Webhook, Schedule Trigger, and App trigger nodes defined in SKILL.md.
- Boundary markers: None present; instructions do not specify the use of delimiters for external data.
- Capability inventory: The skill enables the agent to call API endpoints and design workflow logic.
- Sanitization: The instructions do not include steps for validating or sanitizing incoming data from external triggers.
Audit Metadata