n8n-cost-estimation

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The documented behavior matches the stated cost-estimation purpose and there is no clear exfiltration or malicious routing, but the skill depends on a proprietary local converter executable whose provenance and release verification are not clearly established. Because an unverifiable binary is part of the required workflow, overall security risk is high even though the visible markdown examples are otherwise coherent and the flagged command is only documentation.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Sep 18, 2026, 01:10 AM
Package URL
pkg:socket/skills-sh/datadrivenconstruction%2Fddc_skills_for_ai_agents_in_construction%2Fn8n-cost-estimation%2F@49b530a4c61427659614e7fef05a511a4a4c13beb13d208de1dffa3395a41a6b