n8n-workflow-creator
Warn
Audited by Socket on Mar 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill's capabilities match its stated purpose, but it hardcodes a privately hosted hstgr.cloud n8n instance and forwards a powerful API key there. No malware or installer abuse is evident, but the combination of third-party-hosted endpoint, human secret handoff guidance, destructive workflow control, and reliance on an unspecified helper skill creates meaningful security risk.
Confidence: 87%Severity: 72%
Audit Metadata