n8n-validation-expert
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a technical resource for interpreting n8n validation errors and using related MCP tools. No malicious obfuscation, hidden commands, or credential exposure were found.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it instructs the agent to process untrusted data to perform high-privilege actions.
- Ingestion points: The skill processes external validation results returned by the
validate_nodeandvalidate_workflowtools inSKILL.md. - Boundary markers: There are no instructions for using delimiters to isolate the external validation data from the agent's internal reasoning or instructions.
- Capability inventory: The skill utilizes high-impact tools including
n8n_create_workflow,n8n_update_partial_workflow, andn8n_autofix_workflowwhich can modify the project state. - Sanitization: The skill lacks instructions for sanitizing or validating the structure of external validation output before it is used to guide workflow modifications.
Audit Metadata