n8n
Warn
Audited by Snyk on Mar 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill’s core workflow instructions show the agent fetching and ingesting external, potentially untrusted content (e.g., HTTP Request and Code node fetch examples in SKILL.md and examples/n8n_workflow_examples.js, the PollingTrigger in examples/n8n_custom_node.ts, and the RAG/Document Loader steps in the AI Agent Workflows) so third‑party web/API content can be read and used to drive agent decisions and tool use.
Audit Metadata