n8n-ai-nodes-official
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill architecture handles untrusted input from chat surfaces like Slack, Discord, and Telegram. It follows security best practices by recommending the use of structured output parsers with strict JSON schemas and human-in-the-loop approval nodes for any mutative operations. * Ingestion points: Identified in SKILL.md and references/CHAT_SURFACE_PATTERNS.md as chat triggers and webhooks. * Boundary markers: Encouraged through structured system prompts as detailed in references/SYSTEM_PROMPT.md. * Capability inventory: Tools for Stripe, Notion, and Slack are used, as seen in references/examples/. * Sanitization: Provided via outputParserStructured with autoFix capabilities.
- [DYNAMIC_EXECUTION]: The skill utilizes the autoFix feature in structured output parsing, where a secondary LLM identifies and corrects schema violations in the primary model's output. This is a controlled process limited to JSON structural repair.
- [SAFE]: The skill documentation and examples use standard n8n nodes for API interactions and workflow orchestration. No unauthorized or dangerous shell command execution was found.
Audit Metadata