n8n-binary-and-data-official
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructs on the correct and safe use of n8n platform features for binary data handling, focusing on official patterns and architectural best practices.
- [PROMPT_INJECTION]: The skill describes an architecture for processing user-uploaded content (images, PDFs) which constitutes an indirect prompt injection surface.
- Ingestion points: User-uploaded files enter the workflow through the
Chat Triggeror webhook triggers in thefiles[]array. - Boundary markers: The skill recommends using explicit system prompt instructions to guide the agent and provide context, such as 'CRITICAL: Use EXACTLY the fileName field'.
- Capability inventory: Tools called by the agent can perform various operations on the binary data, including OCR, image editing, or parsing via Code nodes and external service nodes.
- Sanitization: The skill specifically recommends generating hashes for filenames using a Crypto node to prevent path traversal, naming collisions, or unauthorized access attempts via user-supplied filenames.
Audit Metadata