n8n-syntax-code-node
Warn
Audited by Snyk on Apr 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's documentation and examples (SKILL.md and references/anti-patterns.md) explicitly instruct using the HTTP Request node and accessing its output via $("HTTP Request").first().json or $("HTTP Request").all(), which means the Code node will ingest and act on arbitrary public web/API responses (untrusted third-party content).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata