n8n-workflow-lifecycle-official
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). SKILL.md describes an n8n workflow-building lifecycle that ingests user-provided natural-language requests (e.g., “name this workflow”, “describe this workflow”, “folder/project organization request”) directly to drive MCP actions like create_workflow_from_code/search_workflows, but it does not specify reading arbitrary outsider-authored text from an external feed/queue at runtime without selecting a specific user/workflow item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata