n8n-binary-and-data-official
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focus is entirely instructional, providing best practices for handling binary data in n8n. Analysis across all threat categories (obfuscation, exfiltration, persistence, and command execution) shows no malicious behavior.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill discusses the use of external storage (AWS S3, Cloudflare R2, Dropbox) for binary data. These references are documented as standard implementation patterns for the n8n platform and rely on user-provided credentials and infrastructure. No hardcoded secrets or unauthorized data exfiltration patterns were found.
- [INDIRECT_PROMPT_INJECTION]: The skill describes processing user-uploaded files, which is an inherent attack surface. However, it explicitly recommends mitigation strategies including:
- Sanitizing file names by hashing them to prevent path traversal or model confusion.
- Using private storage buckets with session-scoped keys.
- Implementing short Time-To-Live (TTL) policies for uploaded artifacts.
- [DYNAMIC_EXECUTION]: Code snippets provided for n8n 'Code' nodes use standard platform helper functions (e.g.,
getBinaryDataBuffer) and common JavaScript operations for buffer handling. There is no evidence of unsafe dynamic execution or remote code loading.
Audit Metadata