n8n-hebrew-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs users on how to configure n8n's Code nodes and environment settings for executing JavaScript. It includes specific warnings regarding the security implications of powerful nodes (like Execute Command) and recommends least-privilege configurations for self-hosted instances.
- [EXTERNAL_DOWNLOADS]: The skill references several Israeli-specific services and libraries, including Morning, EZCount, hebcal.com, and the israeli-bank-scrapers library. These are well-known services essential to the skill's stated purpose and are documented neutrally.
- [INDIRECT_PROMPT_INJECTION]: The skill describes workflows that ingest data from external sources such as payment webhooks and banking descriptions. It mitigates injection risks by recommending server-side re-verification of transaction data before processing and providing specific helpers for data normalization and sanitization.
Audit Metadata