n8n-workflow-testing-fundamentals
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes n8n workflow definitions and user-supplied test data. Ingestion occurs via workflow IDs and input objects in the
testWorkflowExecutionfunction (SKILL.md) and test cases defined in the evaluation suite (evals/n8n-workflow-testing-fundamentals.yaml). The skill uses capabilities likeexecuteWorkflowandgetWorkflowto interact with these inputs. While explicit sanitization is not shown in the snippets, this behavior is a core requirement for its primary purpose as a testing utility. - [EXTERNAL_DOWNLOADS]: The skill identifies the well-known JSON processing utility
jqas a required tool for its validation scripts and evaluation configuration.
Audit Metadata