n8n-error-handling
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for building n8n workflows that ingest data via 'Webhook' triggers, creating an attack surface for indirect prompt injection.
- Ingestion points: External data enters the agent context through the Webhook trigger payload as documented in
API_WORKFLOWS.md. - Boundary markers: The skill advocates for structural boundaries through a 'Validate Schema' Set-node pattern to enforce data types and constraints, but does not explicitly detail natural language 'ignore instruction' delimiters.
- Capability inventory: The skill utilizes powerful workflow management tools (e.g.,
n8n_update_partial_workflow,n8n_create_workflow,n8n_manage_datatable) which could potentially be manipulated by malicious input if the data flow is not properly isolated. - Sanitization: The skill includes explicit instructions in
API_WORKFLOWS.mdandRESPONSE_SHAPES.mdto sanitize response bodies to prevent leaking internal stack traces, database schemas, or upstream service tokens.
Audit Metadata