n8n-workflow-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for workflows that ingest untrusted data from external sources, which creates a potential surface for indirect prompt injection.
- Ingestion points: Webhook processing nodes and AI Agent workflows (processing chat messages) described in the core patterns.
- Boundary markers: The quick-start examples do not include explicit delimiters or instructions for the agent to ignore embedded commands in external data.
- Capability inventory: The patterns involve network operations (HTTP Request), database writes (Postgres, MySQL), and tool execution via AI Agents.
- Sanitization: While the workflow checklist mentions validation, it lacks specific guidance on sanitizing or filtering input data to prevent injection attacks.
Audit Metadata