n8n
Warn
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation and instruction for executing powerful n8n CLI commands, including
n8n user-management:reset(which performs a factory reset) and destructive database operations likeimport:entities --truncateTables. - [DATA_EXFILTRATION]: Instructions are included for using the
n8n export:credentials --all --decryptedcommand, which dumps all stored instance credentials into a plaintext file. This represent a significant risk for credential harvesting if utilized by an autonomous agent without verification. - [COMMAND_EXECUTION]: Guides the agent through host-level system interactions via
docker execcommands and filesystem maintenance tasks such aschmodandchownpermissions adjustments. - [EXTERNAL_DOWNLOADS]: Documents the process for installing and updating third-party Node.js code using the n8n community package system through internal API endpoints (
POST /community-packages). - [COMMAND_EXECUTION]: Includes a bash script (
czlonkowski/build.sh) for packaging skill distribution files, which executes filesystem commands such aszip,mkdir, andrm.
Audit Metadata