n8n-pto-pipeline

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation and template resource for creating n8n-based automation workflows. The provided code snippets for Google Sheets integration and Telegram messaging use standard, legitimate patterns.
  • [COMMAND_EXECUTION]: The documentation includes commands such as npx n8n --tunnel. This is a standard operation for exposing local n8n instances for testing webhooks and is consistent with the skill's stated purpose of building automation pipelines.
  • [REMOTE_CODE_EXECUTION]: While npx downloads and executes packages, n8n is a well-known and reputable automation platform. Its presence in a guide for construction automation is expected and benign.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes processing user-provided project data (CSV, Excel). However, it functions primarily as a guide and does not include autonomous execution of unvalidated code or network data within the agent's own context. Standard sanitization is advised when the user implements the provided templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 01:08 AM