N8N Skills— agent skill

N8N Skills — independently scanned and version-tracked by SaferSkills.

by haunchen·Agent Skill·github.com/haunchen/n8n-skills

Is N8N Skills safe to install?

SaferSkills independently audited N8N Skills (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 365 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

Score
45/100
●●●●●○○○○○
Re-scan~30s
Latest scan
ScannedJun 22, 2026 · 134d ago
Scans run0 over 90 days
Detectors55 checks · 5 categories
Findings0 warnings · 365 high
EngineSaferSkills 755a9a5
View methodology →
SaferSkills installs
This week0
This month0
All time0
CategoryWeightCategory scoreContribution
Securityprompt, exec, net, exfil, eval
35%
0
0.0 pts
Supply chainhash, typosquat, maintainer, lockfile
20%
100
20.0 pts
Maintenancestaleness, pinning, CI
15%
100
15.0 pts
TransparencySKILL.md, perms, README
15%
100
15.0 pts
Communityinstalls, verify, response
15%
100
15.0 pts

Findings & checks · 365 flagged

Securityscore 0 · 365 findings
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · data/cache/templates.json×365
HIGH — once decoded by the agent, an encoded payload has the same impact class as plain-text injection.
Why it matters

A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.

The exact value spotted
excerptdata/cache/templates.json· json
29304"iconData": {
29305"type": "file",
29306"fileBuffer": "data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN
… (98 chars elided on L29306)
29307},
29308"displayName": "Mistral Cloud Chat Model",
Occurrences
365 occurrences · first at L156, also L279, L423 +362 more
Show all 365 locations
Line
File
L156
data/cache/templates.json
L279
data/cache/templates.json
L423
data/cache/templates.json
L472
data/cache/templates.json
L621
data/cache/templates.json
L792
data/cache/templates.json
L902
data/cache/templates.json
L960
data/cache/templates.json
L1018
data/cache/templates.json
L1064
data/cache/templates.json
L1184
data/cache/templates.json
L1381
data/cache/templates.json
L1552
data/cache/templates.json
L1656
data/cache/templates.json
L1883
data/cache/templates.json
L1987
data/cache/templates.json
L2133
data/cache/templates.json
L2323
data/cache/templates.json
L2374
data/cache/templates.json
L2470
data/cache/templates.json
L2519
data/cache/templates.json
L2710
data/cache/templates.json
L2859
data/cache/templates.json
L2969
data/cache/templates.json
L3027
data/cache/templates.json
L3227
data/cache/templates.json
L3282
data/cache/templates.json
L3406
data/cache/templates.json
L3544
data/cache/templates.json
L3597
data/cache/templates.json
L3642
data/cache/templates.json
L3791
data/cache/templates.json
L3962
data/cache/templates.json
L4072
data/cache/templates.json
L4169
data/cache/templates.json
L4222
data/cache/templates.json
L4276
data/cache/templates.json
L4380
data/cache/templates.json
L4626
data/cache/templates.json
L4797
data/cache/templates.json
L4901
data/cache/templates.json
L4996
data/cache/templates.json
L5141
data/cache/templates.json
L5199
data/cache/templates.json
L5303
data/cache/templates.json
L5545
data/cache/templates.json
L5716
data/cache/templates.json
L5778
data/cache/templates.json
L5832
data/cache/templates.json
L6041
data/cache/templates.json
L6103
data/cache/templates.json
L6290
data/cache/templates.json
L6344
data/cache/templates.json
L6402
data/cache/templates.json
L6453
data/cache/templates.json
L6640
data/cache/templates.json
L6698
data/cache/templates.json
L6802
data/cache/templates.json
L6992
data/cache/templates.json
L7038
data/cache/templates.json
L7085
data/cache/templates.json
L7282
data/cache/templates.json
L7327
data/cache/templates.json
L7372
data/cache/templates.json
L7421
data/cache/templates.json
L7612
data/cache/templates.json
L7658
data/cache/templates.json
L7706
data/cache/templates.json
L7764
data/cache/templates.json
L7864
data/cache/templates.json
L7913
data/cache/templates.json
L8051
data/cache/templates.json
L8109
data/cache/templates.json
L8162
data/cache/templates.json
L8311
data/cache/templates.json
L8482
data/cache/templates.json
L8544
data/cache/templates.json
L8598
data/cache/templates.json
L8656
data/cache/templates.json
L8805
data/cache/templates.json
L8976
data/cache/templates.json
L9034
data/cache/templates.json
L9138
data/cache/templates.json
L9425
data/cache/templates.json
L9476
data/cache/templates.json
L9718
data/cache/templates.json
L9763
data/cache/templates.json
L9812
data/cache/templates.json
L9936
data/cache/templates.json
L10152
data/cache/templates.json
L10323
data/cache/templates.json
L10433
data/cache/templates.json
L10495
data/cache/templates.json
L10549
data/cache/templates.json
L10653
data/cache/templates.json
L10760
data/cache/templates.json
L10924
data/cache/templates.json
L11028
data/cache/templates.json
L11125
data/cache/templates.json
L11199
data/cache/templates.json
L11353
data/cache/templates.json
L11460
data/cache/templates.json
L11609
data/cache/templates.json
L11780
data/cache/templates.json
L11877
data/cache/templates.json
L12025
data/cache/templates.json
L12083
data/cache/templates.json
L12187
data/cache/templates.json
L12378
data/cache/templates.json
L12425
data/cache/templates.json
L12479
data/cache/templates.json
L12670
data/cache/templates.json
L12780
data/cache/templates.json
L12838
data/cache/templates.json
L12942
data/cache/templates.json
L13049
data/cache/templates.json
L13220
data/cache/templates.json
L13317
data/cache/templates.json
L13465
data/cache/templates.json
L13636
data/cache/templates.json
L13694
data/cache/templates.json
L13752
data/cache/templates.json
L13901
data/cache/templates.json
L13953
data/cache/templates.json
L14057
data/cache/templates.json
L14105
data/cache/templates.json
L14254
data/cache/templates.json
L14425
data/cache/templates.json
L14535
data/cache/templates.json
L14597
data/cache/templates.json
L14651
data/cache/templates.json
L14755
data/cache/templates.json
L14862
data/cache/templates.json
L15058
data/cache/templates.json
L15162
data/cache/templates.json
L15360
data/cache/templates.json
L15531
data/cache/templates.json
L15593
data/cache/templates.json
L15635
data/cache/templates.json
L15708
data/cache/templates.json
L15828
data/cache/templates.json
L15877
data/cache/templates.json
L15975
data/cache/templates.json
L16124
data/cache/templates.json
L16295
data/cache/templates.json
L16405
data/cache/templates.json
L16463
data/cache/templates.json
L16521
data/cache/templates.json
L16670
data/cache/templates.json
L16716
data/cache/templates.json
L16764
data/cache/templates.json
L16822
data/cache/templates.json
L16974
data/cache/templates.json
L17165
data/cache/templates.json
L17217
data/cache/templates.json
L17275
data/cache/templates.json
L17330
data/cache/templates.json
L17447
data/cache/templates.json
L17556
data/cache/templates.json
L17754
data/cache/templates.json
L17925
data/cache/templates.json
L18022
data/cache/templates.json
L18170
data/cache/templates.json
L18319
data/cache/templates.json
L18423
data/cache/templates.json
L18665
data/cache/templates.json
L18836
data/cache/templates.json
L18933
data/cache/templates.json
L18982
data/cache/templates.json
L19031
data/cache/templates.json
L19276
data/cache/templates.json
L19325
data/cache/templates.json
L19371
data/cache/templates.json
L19466
data/cache/templates.json
L19657
data/cache/templates.json
L19719
data/cache/templates.json
L19770
data/cache/templates.json
L19998
data/cache/templates.json
L20094
data/cache/templates.json
L20147
data/cache/templates.json
L20201
data/cache/templates.json
L20350
data/cache/templates.json
L20454
data/cache/templates.json
L20694
data/cache/templates.json
L20847
data/cache/templates.json
L20996
data/cache/templates.json
L21167
data/cache/templates.json
L21229
data/cache/templates.json
L21283
data/cache/templates.json
L21399
data/cache/templates.json
L21503
data/cache/templates.json
L21601
data/cache/templates.json
L21749
data/cache/templates.json
L21920
data/cache/templates.json
L21982
data/cache/templates.json
L22036
data/cache/templates.json
L22140
data/cache/templates.json
L22331
data/cache/templates.json
L22441
data/cache/templates.json
L22499
data/cache/templates.json
L22603
data/cache/templates.json
L22751
data/cache/templates.json
L22922
data/cache/templates.json
L22984
data/cache/templates.json
L23038
data/cache/templates.json
L23138
data/cache/templates.json
L23187
data/cache/templates.json
L23285
data/cache/templates.json
L23330
data/cache/templates.json
L23378
data/cache/templates.json
L23423
data/cache/templates.json
L23552
data/cache/templates.json
L23600
data/cache/templates.json
L23839
data/cache/templates.json
L23897
data/cache/templates.json
L24021
data/cache/templates.json
L24284
data/cache/templates.json
L24455
data/cache/templates.json
L24604
data/cache/templates.json
L24775
data/cache/templates.json
L24822
data/cache/templates.json
L24876
data/cache/templates.json
L25024
data/cache/templates.json
L25173
data/cache/templates.json
L25344
data/cache/templates.json
L25390
data/cache/templates.json
L25455
data/cache/templates.json
L25505
data/cache/templates.json
L25563
data/cache/templates.json
L25621
data/cache/templates.json
L25770
data/cache/templates.json
L25941
data/cache/templates.json
L26051
data/cache/templates.json
L26113
data/cache/templates.json
L26167
data/cache/templates.json
L26271
data/cache/templates.json
L26378
data/cache/templates.json
L26575
data/cache/templates.json
L26746
data/cache/templates.json
L26850
data/cache/templates.json
L27120
data/cache/templates.json
L27199
data/cache/templates.json
L27257
data/cache/templates.json
L27315
data/cache/templates.json
L27506
data/cache/templates.json
L27552
data/cache/templates.json
L27606
data/cache/templates.json
L27710
data/cache/templates.json
L27937
data/cache/templates.json
L27995
data/cache/templates.json
L28127
data/cache/templates.json
L28294
data/cache/templates.json
L28390
data/cache/templates.json
L28443
data/cache/templates.json
L28497
data/cache/templates.json
L28688
data/cache/templates.json
L28798
data/cache/templates.json
L28844
data/cache/templates.json
L28909
data/cache/templates.json
L28959
data/cache/templates.json
L29005
data/cache/templates.json
L29110
data/cache/templates.json
L29159
data/cache/templates.json
L29208
data/cache/templates.json
L29257
data/cache/templates.json
L29306
data/cache/templates.json
L29364
data/cache/templates.json
L29413
data/cache/templates.json
L29462
data/cache/templates.json
L29511
data/cache/templates.json
L29560
data/cache/templates.json
L29609
data/cache/templates.json
L29758
data/cache/templates.json
L29929
data/cache/templates.json
L30039
data/cache/templates.json
L30097
data/cache/templates.json
L30155
data/cache/templates.json
L30327
data/cache/templates.json
L30497
data/cache/templates.json
L30646
data/cache/templates.json
L30695
data/cache/templates.json
L30932
data/cache/templates.json
L31042
data/cache/templates.json
L31088
data/cache/templates.json
L31153
data/cache/templates.json
L31246
data/cache/templates.json
L31300
data/cache/templates.json
L31358
data/cache/templates.json
L31462
data/cache/templates.json
L31559
data/cache/templates.json
L31617
data/cache/templates.json
L31666
data/cache/templates.json
L31894
data/cache/templates.json
L32065
data/cache/templates.json
L32123
data/cache/templates.json
L32246
data/cache/templates.json
L32344
data/cache/templates.json
L32492
data/cache/templates.json
L32663
data/cache/templates.json
L32725
data/cache/templates.json
L32779
data/cache/templates.json
L32928
data/cache/templates.json
L32988
data/cache/templates.json
L33112
data/cache/templates.json
L33209
data/cache/templates.json
L33287
data/cache/templates.json
L33336
data/cache/templates.json
L33472
data/cache/templates.json
L33565
data/cache/templates.json
L33623
data/cache/templates.json
L33727
data/cache/templates.json
L33845
data/cache/templates.json
L33968
data/cache/templates.json
L34131
data/cache/templates.json
L34189
data/cache/templates.json
L34293
data/cache/templates.json
L34323
data/cache/templates.json
L34468
data/cache/templates.json
L34639
data/cache/templates.json
L34701
data/cache/templates.json
L34801
data/cache/templates.json
L34908
data/cache/templates.json
L35177
data/cache/templates.json
L35277
data/cache/templates.json
L35464
data/cache/templates.json
L35513
data/cache/templates.json
L35566
data/cache/templates.json
L35715
data/cache/templates.json
L35811
data/cache/templates.json
L35920
data/cache/templates.json
L36136
data/cache/templates.json
L36266
data/cache/templates.json
L36427
data/cache/templates.json
L36476
data/cache/templates.json
L36624
data/cache/templates.json
L36795
data/cache/templates.json
L36892
data/cache/templates.json
L36950
data/cache/templates.json
L37140
data/cache/templates.json
L37314
data/cache/templates.json
L37466
data/cache/templates.json
L37544
data/cache/templates.json
L37602
data/cache/templates.json
L37793
data/cache/templates.json
L37855
data/cache/templates.json
L37999
data/cache/templates.json
L38170
data/cache/templates.json
L38216
data/cache/templates.json
L38316
data/cache/templates.json
L38465
data/cache/templates.json
L38636
data/cache/templates.json
L38789
data/cache/templates.json
L38938
data/cache/templates.json
L39109
data/cache/templates.json
L39167
data/cache/templates.json
L39284
data/cache/templates.json
L39342
data/cache/templates.json
L39446
data/cache/templates.json
L39595
data/cache/templates.json
L39704
data/cache/templates.json
L39753
data/cache/templates.json
L39802
data/cache/templates.json
L39999
data/cache/templates.json
L40170
data/cache/templates.json
L40228
data/cache/templates.json
How to fix
Remove the encoded blob, or decode it and review what it actually contains.
  1. Decode the base64 string and confirm it is not an instruction directed at the agent.
  2. Move any legitimate binary or signature data into a dedicated file (*.sig, SIGNATURES) outside the documentation.
Framework references
OWASPLLM01ATLASAML.T0051
Trace & refs
ruleSS-SKILL-INJECT-B64-PAYLOAD-01sha256ea67050d27c32e41…rubric 365aacaView on GitHub
Supply chainscore 100 · 0 findings
✓—All supply chain checks passedNo findings in this category for the latest scan.pass
Maintenancescore 100 · 0 findings
✓—All maintenance checks passedNo findings in this category for the latest scan.pass
Transparencyscore 100 · 0 findings
✓—All transparency checks passedNo findings in this category for the latest scan.pass
Communityscore 100 · 0 findings
✓—All community checks passedNo findings in this category for the latest scan.pass
Vendor response · right of reply
Are you the maintainer? Submit a response →

Audit the pieces. Scan the whole. Decide.

~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.