n8n-integration-testing-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data from various API providers, which creates a potential surface for instructions embedded in third-party data to influence the agent.
- Ingestion points: The skill ingests data from external API responses via
fetchcalls to Slack, Google Sheets, Jira, GitHub, and other services within the connectivity and operation testing functions inSKILL.md. - Boundary markers: There are no explicit delimiters or instructions for the agent to disregard natural language commands that might be present in the data returned by these external services.
- Capability inventory: The skill utilizes network capabilities (
fetch) to interact with multiple external platforms. - Sanitization: The provided patterns include basic data validation and classification but do not implement robust sanitization or escaping of external content before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill's instructions and code snippets reference official API endpoints for well-known services, including Slack (
slack.com), Google Cloud (googleapis.com), SendGrid, Mailchimp, and Airtable, specifically for the purpose of verifying connectivity and testing n8n node integrations.
Audit Metadata