n8n

Warn

Audited by Snyk on Mar 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill’s core workflow instructions show the agent fetching and ingesting external, potentially untrusted content (e.g., HTTP Request and Code node fetch examples in SKILL.md and examples/n8n_workflow_examples.js, the PollingTrigger in examples/n8n_custom_node.ts, and the RAG/Document Loader steps in the AI Agent Workflows) so third‑party web/API content can be read and used to drive agent decisions and tool use.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 3, 2026, 03:52 AM