n8n-code-python
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents methods to ingest and process untrusted data from external sources such as webhooks and API responses, which could potentially contain malicious instructions.
- Ingestion points: Found in
SKILL.mdandDATA_ACCESS.mdvia_input.all(),_json["body"], and_nodevariables. - Boundary markers: Absent in the instructional templates.
- Capability inventory: Limited to the Python standard library execution within n8n's sandbox; network exfiltration via standard libraries like
requestsis explicitly noted as unavailable. - Sanitization: Not enforced in general templates, although the skill provides regex-based validation examples in
COMMON_PATTERNS.mdto mitigate input risks. - [SAFE]: All external references, including GitHub repositories and domains (
github.com/czlonkowski/n8n-mcpandaiadvisors.pl), belong to the recognized author infrastructure and are used for legitimate documentation and credits.
Audit Metadata