using-n8n-skills-official
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow where the agent ingests and processes untrusted data from external n8n resources.
- Ingestion points: Workflow definitions are retrieved via
get_workflow_details, and execution results (including arbitrary node output) are fetched viaget_execution. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined in this routing skill.
- Capability inventory: The agent can execute workflows (
execute_workflow,test_workflow) that perform network operations, database writes, and file system interactions, as well as modify workflows (update_workflow,create_workflow_from_code). - Sanitization: The instructions do not specify any validation or sanitization routines for data retrieved from n8n nodes before it is processed by the agent.
Audit Metadata