n8n-validation-expert
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it guides the agent to interpret and act upon validation results that may originate from untrusted workflow configurations.
- Ingestion points: The agent ingests data from n8n validation tools such as
validate_node_operationandvalidate_workflowas described inSKILL.mdandERROR_CATALOG.md. - Boundary markers: The instructions lack explicit boundary markers or warnings to disregard instructions that might be embedded within the validation error messages themselves.
- Capability inventory: The agent is encouraged to use powerful tools like
n8n_autofix_workflowandn8n_update_partial_workflowto resolve errors, which could be exploited if an error message contains malicious 'fix' instructions. - Sanitization: There is no mention of sanitizing or validating the 'fix' suggestions provided in tool outputs before execution.
Audit Metadata