The Agent Skills Directory

[SAFE]: The skill promotes secure coding practices by providing explicit instructions to prevent SQL injection in database nodes. It mandates the use of parameter placeholders (e.g., $1, $2) and queryReplacement options instead of string interpolation for user-controlled data.
[SAFE]: The documentation reinforces safe credential management by instructing the agent to never hardcode API keys or tokens in plain text fields, instead directing the use of the platform's encrypted credential system.
[SAFE]: All tools referenced in the instructions, such as get_node_types, list_credentials, and validate_workflow, are standard platform components for the n8n environment and are used according to their intended purposes.
[INDIRECT_PROMPT_INJECTION]: The skill manages the configuration and parameterization of various nodes, which constitutes an attack surface for processing potentially untrusted data. However, the skill provides robust mitigation strategies, including input validation and schema-based grounding, to ensure configuration integrity.
[SAFE]: No evidence of obfuscation, remote code execution, unauthorized data exfiltration, or persistence mechanisms was found across any of the analyzed files.

n8n-node-configuration-official