n8n-code-python

Warn

Audited by Snyk on Mar 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's docs and patterns explicitly show ingesting public, user-generated web content (e.g., COMMON_PATTERNS.md Pattern 1 processing "Hacker News" and "Reddit" items and SKILL.md / DATA_ACCESS.md instructing use of the HTTP Request node or _node["HTTP Request"] to pull external webpages), which the Code node is expected to read and use to make decisions (filtering, prioritization, sorting), so untrusted third-party content can materially influence behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 27, 2026, 04:47 AM
Issues
1