n8n-code-javascript
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides comprehensive guidance on ingesting and processing untrusted data from webhooks and APIs. It includes specific sections on data validation and error handling in
ERROR_PATTERNS.mdto mitigate risks associated with malformed or malicious inputs. - [DATA_EXPOSURE]: The documentation correctly identifies the risks of accessing environment variables and hardcoding secrets. It provides clear guidance on using n8n's native credential management and specialized nodes instead of insecure practices.
- [REMOTE_CODE_EXECUTION]: While the skill explains how to perform HTTP requests using the
this.helpers.httpRequest()function, it warns against performing authentication inside the Code node and recommends delegating sensitive operations to specialized nodes or sub-workflows for better security.
Audit Metadata