n8n:create-community-node-lint-rule

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to run standard development commands using pnpm (e.g., pnpm test, pnpm build, pnpm typecheck) to verify and build the ESLint plugin within the local environment.
  • [PROMPT_INJECTION]: The skill facilitates the creation of new source code and documentation files based on user-provided rule names and descriptions. If an agent processes untrusted input to generate these rules, there is a risk of indirect prompt injection.
  • Ingestion points: User-provided rule names, descriptions, and logic requirements used to populate templates in SKILL.md.
  • Boundary markers: None present in the code templates to delimit untrusted input from logic.
  • Capability inventory: The skill guides the user to perform file writes (src/rules/), shell command execution (pnpm), and registration in existing plugin files.
  • Sanitization: No specific sanitization or validation steps are provided for the user-supplied rule metadata before interpolation into templates.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 12:54 PM
Security Audit — agent-trust-hub — n8n:create-community-node-lint-rule