n8n-validation-expert
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFENO_CODE
Full Analysis
- Indirect Prompt Injection (LOW): The skill establishes an attack surface where an agent processes potentially untrusted data to perform state-changing operations.
- Ingestion points: Workflow configurations and validation error messages processed by the agent to diagnose issues.
- Boundary markers: Not explicitly defined in the provided README documentation.
- Capability inventory: Use of external tools such as
n8n_autofix_workflowandvalidate_node_operationto modify or analyze configurations. - Sanitization: No mention of sanitization or validation of the input strings before processing.
- Data Exposure & Exfiltration (SAFE): No hardcoded credentials, sensitive file path access, or unauthorized network operations were detected. Tool names referenced are part of the standard n8n ecosystem.
- Prompt Injection (SAFE): No instructions attempting to override agent behavior, bypass safety filters, or extract system prompts were found.
- Remote Code Execution (SAFE): No scripts, package installations, or remote execution patterns are present in the analyzed files.
Audit Metadata