n8n-workflow-patterns
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill discusses patterns for building AI agent workflows that process untrusted external data (e.g., from webhooks or APIs). To mitigate indirect prompt injection risks, it provides patterns for system prompt constraints, input validation using Code nodes, and the use of read-only database connections when AI tools are used, particularly in
ai_agent_workflow.mdandwebhook_processing.md. - [COMMAND_EXECUTION]: In
scheduled_tasks.md, the skill includes a documentation example for database backup automation that utilizes thechild_processmodule to executepg_dump. This is presented as a standard administrative pattern within the n8n environment. - [CREDENTIALS_UNSAFE]: The skill explicitly advises users against hardcoding secrets in workflow parameters and provides guidance on using n8n's credential management system for secure authentication with APIs and databases across all integration patterns.
Audit Metadata