n8n-code-python
Warn
Audited by Snyk on Feb 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's documentation and required workflow examples (COMMON_PATTERNS.md Pattern 1 and multiple sections in SKILL.md/ STANDARD_LIBRARY.md) explicitly show ingesting and processing public user-generated sources (e.g., Hacker News and Reddit) via HTTP Request / Webhook nodes, so the agent is expected to read untrusted third‑party web content that can materially influence processing and actions.
Audit Metadata