AGENT LAB: SKILLS

n8n-code-python

Warn

Audited by Snyk on Feb 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's examples and patterns (e.g., COMMON_PATTERNS.md Pattern 1 "Multi-Source Data Aggregation" which explicitly processes Hacker News and Reddit posts) and guidance to use HTTP Request and Webhook nodes show the Code node is expected to ingest and parse public, user-generated content from arbitrary external APIs/webhooks, exposing it to untrusted third-party input.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 15, 2026, 08:08 PM