n8n-code-python
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's examples and patterns (e.g., COMMON_PATTERNS.md Pattern 1 "Multi-Source Data Aggregation" which explicitly processes Hacker News and Reddit posts) and guidance to use HTTP Request and Webhook nodes show the Code node is expected to ingest and parse public, user-generated content from arbitrary external APIs/webhooks, exposing it to untrusted third-party input.
Audit Metadata