📦

n8n

v1.0.1 Content revision r1 Medium Risk ⚙️ External commands🌐 Network access🔑 Env variables

Build n8n Automation Workflows

Creating n8n workflows by hand requires precise node, connection, webhook, and API patterns. This skill gives Claude, Codex, and Claude Code reusable guidance for workflow JSON, REST operations, and MCP integration.

Supports: Claude Codex Code(CC)

📊 73 Adequate

📊 73 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "n8n" from https://skillstore.io/skills/89jobrien-n8n.md and its manifest at https://skillstore.io/api/skills/89jobrien-n8n/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/89jobrien-n8n.md Signed manifest GET /api/skills/89jobrien-n8n/manifest Signed lockfile GET /api/skills/89jobrien-n8n/lockfile

Test it

Using "n8n". Build a webhook workflow that returns the received payload.

Expected outcome:

Recommended nodes: Webhook, optional validation, and Respond to Webhook.
Connection flow: Webhook receives the request, validation prepares the response, and Respond returns structured data.
Security note: test the endpoint path before enabling production traffic.

Using "n8n". Help me update an existing workflow through the n8n API.

Expected outcome:

First read the current workflow and save a backup copy outside n8n.
Then apply the update to a test workflow or inactive workflow.
Activate only after reviewing credentials, webhook paths, and execution history.

Using "n8n". Expose an n8n workflow as an MCP tool.

Expected outcome:

Enable MCP availability in the workflow settings.
Confirm the local MCP endpoint is reachable from the intended client.
Limit tool inputs and outputs to data that is safe for the AI client.

Security Audit

Medium Risk

v7 • 7/5/2026 Open versioned report

Most static findings are false positives caused by Markdown fences, inline code spans, localhost examples, and n8n expression syntax. No prompt-injection text, real embedded secret, or covert exfiltration endpoint was found. The remaining risk is that documented authenticated n8n API calls can modify workflow state or expose execution data if run without confirmation.

3

Files scanned

366

Lines analyzed

0

Review items

0

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:217-247

Privileged n8n Workflow Modification Examples

The documentation includes REST API examples for creating, updating, activating, deactivating, and reading workflow executions. If an agent runs these examples without explicit confirmation, it could change automation behavior or expose execution data from the local n8n instance.

The cited section contains authenticated REST operations that can modify workflow state and request execution data. The risk depends on user authorization and a live n8n instance, so confidence is high but not absolute.

Risk Factors

⚙️ External commands (49)

SKILL.md:23-27 SKILL.md:27-35 SKILL.md:35-44 SKILL.md:44-50 SKILL.md:50-60 SKILL.md:60-66 SKILL.md:66-74 SKILL.md:74-82 SKILL.md:82-117 SKILL.md:117-119 SKILL.md:119-125 SKILL.md:125-145 SKILL.md:145-151 SKILL.md:151-179 SKILL.md:179-185 SKILL.md:185-197 SKILL.md:197-203 SKILL.md:203-206 SKILL.md:206-210 SKILL.md:210-213 SKILL.md:213-217 SKILL.md:217-222 SKILL.md:222-226 SKILL.md:226-231 SKILL.md:231-235 SKILL.md:235-241 SKILL.md:241-245 SKILL.md:245-248 SKILL.md:248-256 SKILL.md:256-257 SKILL.md:257-258 SKILL.md:258-259 SKILL.md:259-260 SKILL.md:260-261 SKILL.md:261-267 SKILL.md:267-268 SKILL.md:268-269 SKILL.md:269-270 SKILL.md:270-271 SKILL.md:271-272 SKILL.md:272-273 SKILL.md:273-274 SKILL.md:274-275 SKILL.md:275-281 SKILL.md:281-282 SKILL.md:282-287 SKILL.md:287-290 SKILL.md:258 SKILL.md:258

🌐 Network access (10)

SKILL.md:119 SKILL.md:134 SKILL.md:204 SKILL.md:211 SKILL.md:218 SKILL.md:227 SKILL.md:236 SKILL.md:239 SKILL.md:246 SKILL.md:282

🔑 Env variables (8)

SKILL.md:26 SKILL.md:205 SKILL.md:212 SKILL.md:219 SKILL.md:228 SKILL.md:237 SKILL.md:240 SKILL.md:247

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Security Assessment

Copy report link

https://skillstore.io/skills/89jobrien-n8n/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/89jobrien-n8n/security.svg)](https://skillstore.io/skills/89jobrien-n8n?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/89jobrien-n8n?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/89jobrien-n8n/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/89jobrien-n8n.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Joseph OBrien. (2026). n8n security audit report (audit version 7) [Author version 1.0.1]. Skillstore. https://skillstore.io/skills/89jobrien-n8n/audits/7

BibTeX citation

@techreport{joseph-obrien-89jobrien-n8n-2026,
  author = {Joseph OBrien},
  title = {n8n security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/89jobrien-n8n/audits/7},
  note = {Author version 1.0.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "n8n security audit report (audit version 7)"
version: "1.0.1"
type: report
authors:
  - name: "Joseph OBrien"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/89jobrien-n8n/audits/7"
identifiers:
  - type: other
    value: "skillstore:89jobrien-n8n:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

55

Architecture

100

Maintainability

87

Content

70

Community

91

Spec Compliance

What You Can Build

Draft webhook automations

Design webhook-triggered workflows with response nodes and clear connection flow.

Manage n8n workflows through API

Plan REST API operations for inspecting, updating, activating, or deactivating workflows.

Expose automations as MCP tools

Prepare workflows for MCP access and Claude Code integration through n8n settings.

Try These Prompts

Create a Basic Workflow

Help me design an n8n workflow that receives a webhook, validates the payload, and returns a JSON response. Include node names and connection flow.

Add API Integration

Design an n8n workflow that accepts webhook data, sends selected fields to an external API, and returns a clean success or failure response.

Review Workflow Structure

Review this n8n workflow design for node structure, connection flow, expression usage, credential handling, and missing error handling.

Plan API Deployment Steps

Create a cautious deployment plan for updating and activating an n8n workflow through the REST API. Include verification steps and rollback checks.

Best Practices

Test workflow changes in a non-production n8n instance before activation.
Store secrets in n8n credentials or environment variables, not in prompts or workflow text.
Add clear error handling for webhooks, API calls, and batch processing paths.

Avoid

Running create, update, or activate API calls against production without review.
Hardcoding real credentials into workflow definitions, prompts, or saved examples.
Publishing webhook or MCP endpoints without authentication, logging, and access controls.

Frequently Asked Questions

Does this skill run n8n workflows automatically?

No. It provides workflow patterns and API examples. A user or agent must apply them to an n8n instance.

Can it create full workflow JSON?

It can guide workflow JSON structure and common node patterns. Live validation still requires n8n.

Does it require an n8n API key?

Only REST API examples require an API key. Keep that key in a secure environment variable or credential store.

Can it help with webhook workflows?

Yes. It covers webhook triggers, response nodes, endpoint paths, and testing guidance.

Does it support MCP integration?

Yes. It describes enabling workflows for MCP and using the local n8n MCP endpoint.

Is it safe for production workflow changes?

Use it carefully. Review generated changes, test them first, and require confirmation before activating production workflows.

Developer Details

Author

License

MIT

Author version

v1.0.1

Skillstore revision

r1

Repository

https://github.com/89jobrien/steve/tree/main/steve/skills/n8n

Ref

c4037264bbd363c572662d6154a3ab28f5ca4f53

Maintenance freshness

7/18/2026

Usage

9 downloads · 196 views

File structure

📄 example-asset.txt

📁 references/

📄 api-reference.md

More from Joseph OBrien

testing

Build Reliable Test Automation

Weak tests slow releases and hide regressions. This skill guides test strategy, TDD, automation, coverage review, and Playwright web checks.

Coding & Development View

debugging

Debug Errors and Root Causes

Errors and incidents are hard to triage when evidence is spread across logs, stack traces, and services. This skill structures diagnosis, parses logs, identifies patterns, and guides minimal fixes.

Coding & Development View

code-context-finder

Find Code Context Faster

Developers often lose time tracing why code exists and what depends on it. This skill prompts Claude, Codex, or Claude Code to gather related graph knowledge, callers, imports, and tests before changes.

Coding & Development View

skill-creator

Create Effective AI Skills

Building reusable AI skills is hard when structure, resources, and validation rules are unclear. This skill provides a practical workflow for designing, writing, validating, and packaging skills.

Documentation View

dependency-management

Manage Dependency Updates and Audits

Dependency updates can hide vulnerabilities, license issues, and breaking changes. This skill guides audits, safe upgrades, and reports across common package managers.

DevOps & Infrastructure View

prompt-optimization

Optimize LLM Prompts and Agent Instructions

Weak prompts create inconsistent model outputs and slow AI feature development. This skill helps structure prompts, examples, constraints, and output formats for Claude, Codex, and Claude Code.

Productivity View

ml-pipeline-workflow

Build Production ML Pipelines

by wshobson

ML teams need repeatable pipelines that connect data preparation, training, validation, deployment, and monitoring. This skill guides Claude, Codex, and Claude Code through practical MLOps workflow design.

DevOps & Infrastructure View

grasshopper-workflow

Automate Grasshopper Workflows

by AmemiyaLai

Grasshopper modeling can require many repeated component, connection, and parameter steps. This skill turns structured design notes into executable workflow files and local MCP actions.

Design & Creative View

slash-command-encoder

Create Slash Commands for AI Workflows

by DNYoussef

Repeated AI workflows are slow when users rely on long natural language prompts. This skill helps define concise slash commands with routing, validation, chaining, and help text.

Productivity View

micro-skill-creator

Create Focused AI Micro-Skills

by DNYoussef

Reusable AI workflows often grow too broad and hard to test. This skill helps define focused skills with specialist prompts, contracts, and validation plans.

Productivity View

obsidian-helper

Organize Obsidian Notes with AI

by ZhanlinCui

Obsidian vaults can become hard to review and update consistently. This skill helps Claude and Codex create daily notes, capture ideas, and summarize recent work.

Productivity View

tool-design

Design Reliable Tools for AI Agents

by Asmayaseen

Ambiguous tools cause incorrect calls, wasted context, and poor recovery from errors. This skill provides practical patterns for clear descriptions, schemas, responses, and testing.

Coding & Development View