n8n-best-practices

Warn

Audited by Snyk on Mar 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs disabling n8n sandboxing (NODE_FUNCTION_ALLOW_BUILTIN=*) and setting N8N_BLOCK_ENV_ACCESS_IN_NODE=false and includes a launchd service snippet to add environment variables, which effectively encourages bypassing application-level security and modifying service configuration that can enable code nodes to access host capabilities (even though it doesn't explicitly call for sudo or create users).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 9, 2026, 01:37 PM