n8n-mcp-tools-expert
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected in the skill files. The content is strictly instructional, providing guidance on tool selection, parameter formatting, and workflow management for the n8n-mcp server.
- [DATA_EXPOSURE]: The skill references the use of an
N8N_API_KEYas a prerequisite for certain workflow tools. However, it does not attempt to harvest, hardcode, or exfiltrate these credentials; it merely documents the platform's authentication requirements for legitimate tool usage. - [COMMAND_EXECUTION]: The skill describes tools that modify external n8n instances (e.g.,
n8n_create_workflow,n8n_update_partial_workflow). While these tools have side effects on a target system, the skill itself does not contain executable scripts or unauthorized shell commands. - [INDIRECT_PROMPT_INJECTION]: The skill establishes patterns for processing node configurations and workflow definitions. This creates a surface where untrusted data from a user or external source could be passed into tool parameters. The skill mitigates this by providing extensive documentation on validation tools (
validate_node_operation,validate_workflow) and profiles (minimal, runtime, ai-friendly) to ensure configurations are legitimate before deployment.
Audit Metadata