n8n-validation-expert
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes workflow configurations and validation results, which are external data sources that could potentially contain malicious instructions.
- Ingestion points: SKILL.md and ERROR_CATALOG.md describe processing node configurations and workflow definitions.
- Boundary markers: There are no explicit instructions to treat configuration values as untrusted or to use specific delimiters for data fields.
- Capability inventory: The skill utilizes tools like n8n_create_workflow and n8n_update_partial_workflow which allow modification of the environment.
- Sanitization: An automated sanitization system is described for structural fixes, but it does not address potential prompt injection in text fields.
- [EXTERNAL_DOWNLOADS]: The skill documentation references official APIs for well-known services like GitHub and Stripe in documentation examples. These are standard integration points within the n8n ecosystem and do not pose a security risk.
Audit Metadata