n8n-validation-expert
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process n8n workflow data (JSON/JavaScript) which is an untrusted external source that could contain embedded instructions intended to influence agent behavior.
- Ingestion points: Workflow configuration objects and definitions processed by tools such as
validate_node,validate_workflow, and potentially external files mentioned in the guide likeERROR_CATALOG.mdandFALSE_POSITIVES.md. - Boundary markers: None identified in the provided instructions to delimit external workflow content from agent instructions.
- Capability inventory: The skill facilitates powerful write operations on the n8n server, including
n8n_create_workflow,n8n_update_partial_workflow, andn8n_autofix_workflow(as described inreferences/detailed-guide.md). - Sanitization: While the guide describes an 'Auto-Sanitization System', it focuses on correcting structural/functional workflow errors rather than sanitizing inputs to prevent prompt injection or malicious command execution.
Audit Metadata