n8n-validation-expert
Fail
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: HIGHPROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection] (HIGH): The skill possesses a high-risk vulnerability surface by design, as it interprets external data that can be manipulated by attackers to influence agent behavior.
- Ingestion points: Workflow and node configurations ingested during validation and fixing cycles as described in the README.md.
- Boundary markers: No instructions for delimiters or clear boundaries to prevent the agent from following instructions embedded within the workflow data are provided.
- Capability inventory: The skill utilizes tools such as
n8n_autofix_workflow(with the ability to apply changes to the workflow viaapplyFixes: true) andvalidate_node_operation. - Sanitization: The skill lacks documented input sanitization or validation logic to verify the integrity of external configurations before processing them.
Recommendations
- AI detected serious security threats
Audit Metadata