n8n-workflow-sdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs running scripts/refresh-node-registry.sh which fetches live data from https://api.n8n.io/api/nodes and https://api.n8n.io/api/community-nodes (and installs community npm packages) and then requires reading those updated registries/properties to choose node types and parameters that directly drive workflow construction, so untrusted public content can influence the agent's decisions and tool use.