n8n-binary-and-data
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious prompt injection or bypass patterns detected. The skill provides legitimate instructions for configuring AI agent system prompts to handle file storage keys correctly.
- [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill discusses standard data flow patterns between n8n nodes and well-known cloud storage providers (S3, Cloudflare R2, Google Drive).
- [EXTERNAL_DOWNLOADS]: No suspicious external downloads or remote script executions. References to external services are limited to official documentation and well-known cloud infrastructure providers.
- [OBFUSCATION]: No obfuscated code, hidden characters, or encoded commands were found in the skill files.
- [REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities identified. The JavaScript/Python code snippets provided are standard for use within n8n's sandboxed Code nodes for data transformation.
- [COMMAND_EXECUTION]: No dangerous shell commands or privilege escalation attempts were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies and provides mitigation strategies for the ingestion of untrusted data (user-uploaded files). It recommends best practices such as staging files in private storage, using hashed keys for reference, and applying explicit boundary markers in the agent's system prompt to prevent the model from misinterpreting or mishandling file data.
Audit Metadata