n8n-code-javascript
Warn
Audited by Snyk on May 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's SKILL.md explicitly shows ingesting external/untrusted data via webhooks (see "Critical: Webhook Data Structure" —
$json.body) and making arbitrary HTTP requests/combining data from multiple APIs or webhooks with$helpers.httpRequest()and "Multi-Source Data Aggregation", so it clearly consumes third-party/user-generated content that can influence code-node behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata