n8n-error-handling
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent on using standard
n8n-mcptool calls likeupdateNodeandaddConnection. These operations are used to objectively configure nodes and wiring within the n8n platform as intended for workflow management. - [INDIRECT_PROMPT_INJECTION]: The skill addresses workflows that ingest untrusted external data via Webhook triggers. It provides specific mitigations for potential injection or data poisoning by offering a structured 'Set-node schema validator' pattern and explicitly instructing the agent to sanitize error responses to prevent leaking internal stack traces, SQL queries, or tokens.
- [CREDENTIALS_SAFE]: The skill mentions the use of n8n API personal access tokens when using the internal n8n node for fetching execution data. It correctly guides the user to manage these credentials through the n8n UI settings rather than embedding or hardcoding them in the workflow logic.
- [DYNAMIC_EXECUTION]: While the skill provides JavaScript-based IIFE (Immediately Invoked Function Expression) templates for n8n expressions, these are static validation patterns provided for the agent to implement. They do not involve the dynamic generation or execution of untrusted code from external sources.
Audit Metadata