qe-n8n-integration-testing-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill defines connectivity and operation tests targeting well-known services including Slack, Google Sheets, Jira, GitHub, SendGrid, Mailchimp, and Airtable. These operations are performed using standard API endpoints for those services to verify integration health.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external API responses during testing, creating a potential surface for indirect prompt injection if a connected service were to return malicious content.\n
- Ingestion points: API response data is parsed (e.g.,
await response.json()) in the connectivity and operation test functions inSKILL.md.\n - Boundary markers: No explicit delimiters or boundary markers are present in the code templates.\n
- Capability inventory: The skill uses
fetchfor network operations.\n - Sanitization: No specific sanitization of API response content is defined, which is appropriate for the skill's primary purpose of structural validation and connectivity testing.
Audit Metadata