n8n-toolkit
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Detailed analysis of the skill's instructions, scripts, and references found no evidence of malicious intent or security risks. The skill follows established security protocols for automated workflows.
- [DATA_EXFILTRATION]: The skill correctly identifies the risks of hardcoded credentials and explicitly instructs the user to utilize n8n's secure credential store and environment variables for sensitive keys.
- [COMMAND_EXECUTION]: The skill includes a local utility script,
scripts/check-output.py, used to validate that generated deliverables meet structural requirements. This script is restricted to standard Python libraries and performs no dangerous operations. - [EXTERNAL_DOWNLOADS]: References to external LeadMagic API endpoints for email verification and enrichment are well-documented and legitimate service integrations provided by the skill author.
- [PROMPT_INJECTION]: The skill acknowledges the potential for indirect prompt injection when processing external data (e.g., in reply classification) and mitigates this risk by recommending field normalization, JSON schema validation, and human review steps.
Audit Metadata