n8n-triggers-webhooks

SUSPICIOUS. The core n8n trigger guidance is benign, but the skill is not tightly scoped: it strongly steers users toward installing and using ColdIQ tooling, including unpinned `npx` execution and API-key forwarding to an external MCP package. Same-org evidence makes this look more like promotional overreach than confirmed malware, but the extra installation and credential-routing are disproportionate to a trigger/webhook-focused skill.