n8n-mcp-tools-expert
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the creation and modification of n8n workflows based on user input, creating a surface for indirect prompt injection.
- Ingestion points: Data enters the agent's context through search queries and configuration parameters for tools such as
search_nodes,validate_node_operation, andn8n_create_workflow(documented inSEARCH_GUIDE.mdandWORKFLOW_GUIDE.md). - Boundary markers: The skill does not explicitly instruct the agent to use boundary markers or delimiters when interpolating external data into workflow parameters.
- Capability inventory: The skill enables comprehensive workflow management, including adding nodes and connections that can perform network requests or execute code within the n8n environment (
n8n_update_partial_workflowinWORKFLOW_GUIDE.md). - Sanitization: While the skill mentions an 'Auto-Sanitization System' in
VALIDATION_GUIDE.md, this system focuses on fixing internal n8n operator structures (e.g., binary vs unary operators) rather than filtering malicious content from external inputs.
Audit Metadata