n8n-subworkflows
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate architectural guidance for n8n workflow development and promotes best practices for maintainability and discovery.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of workflows that ingest external data via typed trigger fields. While this introduces an interface for potentially untrusted data, the skill explicitly advocates for 'Define Below' triggers with explicit schemas as a security best practice, providing better structure and validation than unstructured data passthrough.
- Ingestion points: Workflow trigger inputs defined in SKILL.md and SUBWORKFLOW_PATTERNS.md.
- Boundary markers: Not explicitly defined within the skill content.
- Capability inventory: Uses n8n MCP tools for workflow management and data table operations.
- Sanitization: Relies on the platform's internal type handling for typed fields.
Audit Metadata