n8n-workflow-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for n8n workflows that process untrusted data from external sources, which creates a potential surface for indirect prompt injection attacks if not properly managed.\n
- Ingestion points: Webhook bodies (webhook_processing.md) and HTTP API responses (http_api_integration.md).\n
- Boundary markers: The skill suggests validation steps and conditional checks to verify data integrity.\n
- Capability inventory: n8n workflows utilize database operations, Google Drive integration, HTTP requests, and custom code execution (SKILL.md, database_operations.md).\n
- Sanitization: The patterns include examples of input validation and explicit warnings about indirect prompt injection, recommending human review for sensitive actions (ai_agent_workflow.md).\n- [DYNAMIC_EXECUTION]: The skill provides tutorials on using n8n Code nodes for custom logic and executing shell commands for tasks like database backups.\n
- Evidence:
scheduled_tasks.mdprovides a pattern usingrequire('child_process').exec()for runningpg_dump.
Audit Metadata