n8n-code-nodes
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs Code nodes to make HTTP requests to arbitrary public endpoints (via $helpers.httpRequest) and includes patterns that ingest and parse third‑party user-generated content (e.g., Reddit, Hacker News, RSS feeds, GitHub releases) from those open web sources, which the agent is expected to read and act on as part of workflow logic.
Audit Metadata