n8n-code-python
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions facilitate processing untrusted data from external sources such as webhooks, which presents a surface for indirect prompt injection.
- Ingestion points: Data is ingested through
_input.all(),_json["body"], and_nodesyntax as documented inreferences/detailed-guide.md. - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the processed data.
- Capability inventory: The skill enables Python-based data transformation, regex processing, and statistical calculations as shown in the examples in
references/detailed-guide.md. - Sanitization: The instructions include best practices for safety, such as using
.get()for dictionary access and handling null values, which helps prevent execution errors during data processing.
Audit Metadata