n8n-agents
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an authoritative guide for building robust AI agents, providing detailed reference implementations and documentation for the n8n ecosystem.
- [SAFE]: Implements proactive security measures for chat-triggered workflows, specifically documenting 'anti-loop' filtering to prevent infinite loops and potential resource exhaustion from bot-to-bot interactions.
- [SAFE]: Explicitly promotes and provides configuration patterns for 'Human-in-the-loop' (HITL) review, ensuring that tools with significant side effects—such as payment processing or communication—require explicit human approval before execution.
- [SAFE]: Recommends the use of structured output parsers with JSON schema validation and auto-fix mechanisms. This approach ensures that downstream processes receive validated data and provides a secondary layer of defense against model hallucinations or malformed responses.
- [SAFE]: The skill manages the attack surface of untrusted data ingestion from chat platforms through clear boundary markers and sanitization strategies.
- Ingestion points: Identified in the Slack Trigger (references/examples/slack-router.json) and Execute Workflow Trigger (references/examples/agent-core.json).
- Boundary markers: Defined via system prompt instructions and persona constraints in references/SYSTEM_PROMPT.md.
- Capability inventory: Tools for Notion, Slack, and web searching are demonstrated with restricted scopes.
- Sanitization: Validated via Human-in-the-loop review (references/HUMAN_REVIEW.md) and structured output parsing (references/STRUCTURED_OUTPUT.md).
Audit Metadata