n8n-node-configuration
Warn
Audited by Snyk on Feb 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's required workflow and examples explicitly configure HTTP Request nodes (e.g., calling "https://api.example.com" in OPERATION_PATTERNS.md/SKILL.md) and Webhook trigger nodes (nodes-base.webhook) that ingest external/untrusted request data (under $json.body) which the agent is expected to read/interpret and use in conditional logic and downstream actions, so third‑party content can materially influence behavior.
Audit Metadata