n8n-daily-report

SUSPICIOUS: the overall workflow matches daily report automation, but two core data flows are insufficiently bounded. The skill allows credentialed Procore traffic and full report contents to be sent to arbitrary env-supplied endpoints, especially an unspecified PDF service, without proving same-org or official ownership. Capabilities are mostly purpose-aligned, but data flow integrity is weak enough to warrant caution.