n8n-code-javascript
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code, unauthorized network access, or obfuscation patterns were detected. The skill is an informational guide intended to help users write code for the n8n platform.\n- [PROMPT_INJECTION]: The skill describes patterns for processing data from external sources, which constitutes a potential surface for indirect prompt injection.\n
- Ingestion points: Untrusted data is ingested through
$input.all(),$input.first(), and$nodereferences in SKILL.md.\n - Boundary markers: The provided templates do not incorporate boundary markers or specific instructions for the agent to ignore commands embedded within the processed data.\n
- Capability inventory: The skill documents the use of
$helpers.httpRequest()for making external network calls and general code execution within the n8n environment.\n - Sanitization: No sanitization or content validation for the values of incoming data is included in the provided code examples.
Audit Metadata