n8n-code-python
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's docs and patterns explicitly show ingesting public, user-generated web content (e.g., COMMON_PATTERNS.md Pattern 1 processing "Hacker News" and "Reddit" items and SKILL.md / DATA_ACCESS.md instructing use of the HTTP Request node or _node["HTTP Request"] to pull external webpages), which the Code node is expected to read and use to make decisions (filtering, prioritization, sorting), so untrusted third-party content can materially influence behavior.
Audit Metadata