n8n-agents-official
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONPERSISTENCE
Full Analysis
- [SAFE]: The skill is an official administration tool provided by the vendor (n8n-io) to manage resources within its own ecosystem. It relies on documented API tools and follows platform safety guidelines, such as using managed credential IDs rather than hardcoded secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of agents that process data from external communication platforms like Slack, Telegram, and Discord. It includes specific architectural guidance on using session isolation, memory blocks, and human approval gates to mitigate risks associated with processing untrusted external instructions.
- [DYNAMIC_EXECUTION]: The skill provides capabilities to deploy custom tools using TypeScript code. This functionality is restricted to a secure sandbox that only allows imports from the
@n8n/agentsandzodlibraries, preventing the execution of arbitrary or malicious code outside the intended scope. - [PERSISTENCE]: The skill manages scheduled automation through CRON-based tasks. This is a core functional feature of the platform and is gated by the agent's publishing workflow, which requires explicit user action to activate or modify scheduled behavior.
Audit Metadata