n8n-code-javascript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill shows Code node examples that fetch and ingest external, untrusted content (e.g., arbitrary HTTP requests via $helpers.httpRequest and incoming webhook payloads accessed under $json.body, and examples combining data from multiple APIs/webhooks), so the agent is expected to read and interpret third-party/user-provided content.