n8n-workflow-creator

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's capabilities match its stated purpose, but it hardcodes a privately hosted hstgr.cloud n8n instance and forwards a powerful API key there. No malware or installer abuse is evident, but the combination of third-party-hosted endpoint, human secret handoff guidance, destructive workflow control, and reliance on an unspecified helper skill creates meaningful security risk.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Mar 17, 2026, 07:48 PM
Package URL
pkg:socket/skills-sh/Dev-Dennis-040%2Fopenclaw-agency-skills%2Fn8n-workflow-creator%2F@29fdf2e889df50c56f9874e725db2563b997c99b
Security Audit — socket — n8n-workflow-creator