n8n-gen

Fail

Audited by Socket on Mar 8, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is largely coherent with its stated purpose: it automates gathering reference workflows from an official source, synthesizes a final n8n JSON, and generates accompanying documentation. The primary security concern is the explicit interception of clipboard content, which could leak sensitive clipboard data in certain contexts. Other than this clipboard interaction, data flows remain local and originate from trusted sources. Overall, the risk is LOW to MEDIUM (principally due to clipboard access) with no credential exposure or external exfiltration identified. Recommend clarifying and hardening clipboard handling (e.g., explicit user consent, restricted scope to JSON data, or eliminating clipboard access in favor of DOM extraction) to reduce privacy risk.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 8, 2026, 11:01 AM
Package URL
pkg:socket/skills-sh/Rabbit-Ivan%2FIvan-skills%2Fn8n-gen%2F@7c5f76e117230f5bcd89b507c4e9958267858e52