n8n-automation
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands using
curlandjqto interact with the n8n API. These commands are necessary for the skill's primary purpose of managing automation workflows. - [PROMPT_INJECTION]: The skill processes external data, such as workflow names and execution error logs, retrieved via the n8n API. This creates a potential surface for indirect prompt injection if an attacker can control the content of the n8n instance being queried.
- Ingestion points: API response data from
$N8N_API_URL/workflowsand$N8N_API_URL/executions. - Boundary markers: Absent in the provided shell command examples; data is piped directly into
jqor displayed. - Capability inventory: Shell command execution (
curl,jq), file system access (-d @workflow.json). - Sanitization: No explicit instructions for sanitizing or escaping the retrieved API content before it is processed by the agent.
Audit Metadata