n8n:protect-endpoints
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content for developers on how to properly implement and test Role-Based Access Control (RBAC) within the n8n ecosystem.
- [SAFE]: It promotes secure coding practices by providing a decision matrix for applying authorization decorators (@ProjectScope, @GlobalScope) and highlighting the risks of IDOR (Insecure Direct Object Reference) vulnerabilities if decorators are omitted.
- [SAFE]: It includes guidance on handling unauthenticated endpoints safely through signature/HMAC verification and emphasizes defense-in-depth strategies, such as filtering database queries by project ID in the service layer.
- [SAFE]: The provided regression test templates use standard testing frameworks to ensure authorization is correctly applied to all controller routes, reducing the risk of accidental exposure.
Audit Metadata