n8n
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands for environment setup and application management. It employs
opensslto generate secure, unique passwords and encryption keys for the deployment. Other commands includedocker composefor orchestration andcurlfor testing local endpoints. - [EXTERNAL_DOWNLOADS]: The skill references official container images from
docker.n8n.io(the official n8n registry) and thepostgresofficial image on Docker Hub. These are well-known, trusted sources for these services. - [CREDENTIALS_SAFE]: The skill demonstrates secure secret management by advising the use of a
.envfile for sensitive variables likePOSTGRES_PASSWORDandN8N_ENCRYPTION_KEY, and explicitly warns against committing these secrets to version control. - [DATA_EXPOSURE]: It correctly identifies sensitive file paths related to the application's configuration and persistence (e.g.,
.env, the n8n data volume) and provides guidance on securing them through filesystem permissions and proper proxy configuration.
Audit Metadata