n8n-subworkflows
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of Markdown documentation. No executable scripts, binaries, or configuration files were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill documents n8n sub-workflow creation, which creates a surface for processing external data via the
Execute Workflow Triggeringestion point. While specific prompt delimiters are not defined, the skill advocates for typed inputs to minimize schema confusion. Capabilities include workflow modification and data management via standard n8n MCP tools. The instructions include sanitizing output shapes using a final Return node to enforce the output contract. - [SAFE]: The instructions promote secure practices. The skill warns against placing credentials in inputs or returned data and requires user confirmation before running sub-workflows that perform state-changing or billable operations.
Audit Metadata