n8n-code-python
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a documentation resource for n8n's Python Code nodes. It correctly identifies environment restrictions, such as the inability to import external packages like 'requests' or 'pandas', and explicitly instructs the user to rely on the Python standard library. No instances of obfuscation, malicious command execution, or unauthorized network activity were detected.
- [PROMPT_INJECTION]: The skill describes an attack surface for indirect prompt injection as it facilitates the processing of untrusted external data.
- Ingestion points: Data enters the context via
_input.all(),_input.first(),_input.item,_json, and_nodereferences inSKILL.md. - Boundary markers: None are present in the provided code templates to distinguish data from instructions.
- Capability inventory: The skill enables the generation of Python scripts for data transformation and filtering within the n8n environment.
- Sanitization: No input sanitization or validation logic is included in the templates, though the documentation recommends using the
.get()method for safe dictionary access.
Audit Metadata