n8n-workflow-patterns
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [Prompt Injection] (SAFE): No instructions attempting to override agent behavior or bypass safety filters were detected in the documentation content.\n- [Data Exposure & Exfiltration] (SAFE): The skill documentation explicitly promotes secure credential management and the use of parameterized queries to mitigate data exposure and SQL injection risks.\n- [Indirect Prompt Injection] (SAFE): The skill describes workflow patterns that ingest untrusted data via webhooks. It provides a mandatory evidence chain for mitigation: (1) Ingestion points: Webhooks (documented in webhook_processing.md); (2) Boundary markers: Authentication and validation processes are recommended; (3) Capability inventory: Workflow capabilities include HTTP requests, database operations, and AI tools; (4) Sanitization: Guidance includes the use of parameterized queries and data validation.\n- [No Code] (SAFE): The analyzed README.md file is documentation-only and does not contain executable scripts or binary files.
Audit Metadata