n8n

Warn

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides documentation and instruction for executing powerful n8n CLI commands, including n8n user-management:reset (which performs a factory reset) and destructive database operations like import:entities --truncateTables.
  • [DATA_EXFILTRATION]: Instructions are included for using the n8n export:credentials --all --decrypted command, which dumps all stored instance credentials into a plaintext file. This represent a significant risk for credential harvesting if utilized by an autonomous agent without verification.
  • [COMMAND_EXECUTION]: Guides the agent through host-level system interactions via docker exec commands and filesystem maintenance tasks such as chmod and chown permissions adjustments.
  • [EXTERNAL_DOWNLOADS]: Documents the process for installing and updating third-party Node.js code using the n8n community package system through internal API endpoints (POST /community-packages).
  • [COMMAND_EXECUTION]: Includes a bash script (czlonkowski/build.sh) for packaging skill distribution files, which executes filesystem commands such as zip, mkdir, and rm.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 18, 2026, 12:07 PM
Security Audit — agent-trust-hub — n8n