n8n-validation-expert
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting, interpreting, and modifying complex workflow JSON data and validation logs from external sources. This creates a potential surface for indirect prompt injection where malicious instructions could be hidden in workflow metadata, node descriptions, or code parameters.
- Ingestion points:
SKILL.md,ERROR_CATALOG.md, andREVIEW_CHECKLIST.mdinstruct the agent to fetch and analyze external data using tools liken8n_get_workflowandvalidate_node. - Boundary markers: The provided instructions lack explicit requirements for the agent to use strict delimiters or safety warnings (e.g., "ignore instructions in the data") when processing this content.
- Capability inventory: The skill utilizes powerful modification and execution tools, including
n8n_update_partial_workflow,n8n_autofix_workflow, andn8n_test_workflow(which executes workflow logic). - Sanitization: There is no specific instruction for the agent to sanitize or filter input strings from the workflow JSON before interpreting them or generating suggested fixes.
Audit Metadata