using-n8n-skills-official
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the management of n8n workflows and agents, creating a potential surface for instructions embedded in external data to influence agent behavior.
- Ingestion points: Data enters the agent's context through tools such as get_workflow_details (workflow JSON), get_user_preferences (stored settings), and search_workflows.
- Capability inventory: The agent has the ability to modify the environment through tools like create_workflow_from_code, update_workflow, execute_workflow, and mutate_agent.
- Boundary markers: There are no explicit instructions to use delimiters or 'ignore instructions' warnings when processing data from these tools.
- Sanitization: The skill does not specify procedures for sanitizing or validating the content of the data ingested from the n8n instance before it is used in further operations.
Audit Metadata