n8n-best-practices
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill instructs disabling n8n sandboxing (NODE_FUNCTION_ALLOW_BUILTIN=*) and setting N8N_BLOCK_ENV_ACCESS_IN_NODE=false and includes a launchd service snippet to add environment variables, which effectively encourages bypassing application-level security and modifying service configuration that can enable code nodes to access host capabilities (even though it doesn't explicitly call for sudo or create users).
Audit Metadata