n8n-mcp-tools-expert
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for tools that ingest external, potentially untrusted data which could contain malicious instructions.
- Ingestion points: The
n8n_deploy_templatetool fetches workflow definitions from a remote template library, andget_nodewithincludeExamples: trueretrieves external configuration examples. - Boundary markers: The skill contains explicit 'side-effect boundaries' and warnings advising that templates are untrusted third-party code and should be reviewed before deployment.
- Capability inventory: The toolset includes
n8n_create_workflow,n8n_update_partial_workflow, andn8n_deploy_template, which provide significant write and execution capabilities on a live n8n instance. - Sanitization: The documentation recommends reviewing diffs before mutation, using synthetic staging credentials, and disabling automatic upgrades until compatibility is verified.
- [DYNAMIC_EXECUTION]: The skill supports the creation and management of n8n workflows that include Code nodes, which execute arbitrary JavaScript or Python logic at runtime.
- [EXTERNAL_DOWNLOADS]: The
n8n_deploy_templatetool is designed to download and deploy workflow configurations from an external library containing over 2,700 templates.
Audit Metadata