n8n-node-configuration

Warn

Audited by Snyk on Feb 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill's required workflow and examples explicitly configure HTTP Request nodes (e.g., calling "https://api.example.com" in OPERATION_PATTERNS.md/SKILL.md) and Webhook trigger nodes (nodes-base.webhook) that ingest external/untrusted request data (under $json.body) which the agent is expected to read/interpret and use in conditional logic and downstream actions, so third‑party content can materially influence behavior.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 26, 2026, 07:07 AM