n8n-validation-expert
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill's instructions focus entirely on interpreting error messages and guiding the user through valid configurations. There are no attempts to bypass safety filters, extract system prompts, or override agent constraints.
- [DATA_EXFILTRATION]: No network operations or sensitive file access patterns were found. The skill does not attempt to read credentials, environment variables, or private files.
- [CREDENTIALS_UNSAFE]: The skill includes placeholders like
sk_live_abc123...andDEMO_TOKENwithin documentation to illustrate what NOT to do (hardcoding secrets). These are clearly marked as examples of bad practice and do not constitute credential exposure. - [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts. The JavaScript examples provided in the documentation are for illustrative purposes and do not involve
eval,exec, or piped shell commands. - [COMMAND_EXECUTION]: No shell command execution patterns or
!-prefixed dynamic context injections were detected in the skill files. - [OBFUSCATION]: The content is presented in clear, readable Markdown. No Base64 encoding, zero-width characters, homoglyphs, or other hidden content techniques were identified.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or package installations. It refers to other skills and tools within the same ecosystem which is expected behavior.
Audit Metadata