n8n-expression-syntax
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents the ingestion and mapping of untrusted data from Webhook nodes to downstream tool executions. Ingestion points: Webhook node body data as seen in SKILL.md and EXAMPLES.md. Boundary markers: No explicit boundary markers or 'ignore instructions' prompts are included in the provided expression examples. Capability inventory: The skill demonstrates mapping this data to Postgres database inserts, HTTP requests, and Slack messages in EXAMPLES.md. Sanitization: While standard n8n transformations are shown, specific sanitization for SQL injection is not explicitly detailed in the provided SQL template examples.
- [DYNAMIC_EXECUTION]: The skill provides instructions for using immediately-invoked arrow functions (IIFEs) and Code nodes for runtime data processing. Patterns: Guidelines for writing multi-line JavaScript logic within expressions using IIFE patterns such as '={{ (() => { ... })() }}'. Context: These are standard high-performance transformation techniques within the n8n ecosystem intended for advanced data shaping.
Audit Metadata