n8n-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited n8n-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Design, build, and troubleshoot n8n workflows for Mick's self-hosted automation stack with practical node and deployment guidance.
n8n-workflow.Design, build, or troubleshoot n8n automation workflows for Mick's self-hosted Proxmox environment.
192.168.0.81, port 5678https://api.anthropic.com/v1/messagesContinue on Fail with a downstream notification step.{
"method": "POST",
"url": "https://api.anthropic.com/v1/messages",
"headers": {
"x-api-key": "={{ $credentials.anthropicApi.apiKey }}",
"anthropic-version": "2023-06-01",
"content-type": "application/json"
},
"body": {
"model": "use-your-current-claude-model",
"max_tokens": 1024,
"messages": [
{
"role": "user",
"content": "={{ $json.prompt }}"
}
]
}
}Extract the response with:
{{ $json.content[0].text }}WebhookPOST/your-endpoint-nameIF validation of X-Webhook-Secrethttps://n8n.yourdomain.com/webhook/your-endpoint-nameSchedule Trigger0 6 * * **/15 * * * *0 7 * * 1-5Schedule Trigger
-> HTTP Request (GET RSS feed URL)
-> XML node (parse feed)
-> SplitInBatches (process items)
-> IF (filter by date or keyword)
-> Set (normalize fields: title, link, pubDate, summary)
-> Merge or Aggregate
-> HTTP Request (Claude API for summarization)[Any node with Continue on Fail enabled]
-> IF (check {{ $json.error }} exists)
-> True branch: HTTP Request to Slack, Teams, or Discord webhook
Body: "Workflow failed: {{ $workflow.name }} | Error: {{ $json.error.message }}"When the user shares an existing workflow (exported JSON, screenshot, or description) and asks whether it is solid, review it against these questions before suggesting changes:
Report findings in priority order with the smallest fix for each, and say plainly when a workflow is fine as-is.
When the user wants exact wiring steps rather than a pattern sketch, deliver the build in this format, one entry per node:
Node N: [Node type] - [name to give it]
Purpose: [one line]
Key settings: [the non-default fields and their values]
Connects from: [previous node and output branch]
Test: [what to pin or run to verify before moving on]End with the order to activate things: build with pinned data, unpin, run once manually, then enable the trigger.
For Mick's CT 104 instance, treat these as part of any deployment-affecting change:
N8N_ENCRYPTION_KEY) backed up separately from the database backup; credentials are unrecoverable without it~/.n8n/ (SQLite database plus config) before n8n version updates; a vzdump of CT 104 before major upgrades is the cheap rollbackSchedule Trigger (6am weekdays)
|- HTTP Request -> CoinGecko API (BTC, ETH prices)
|- HTTP Request -> RSS feeds (tech news)
`- HTTP Request -> Reddit API (r/algotrading, r/homelab)
Merge (all three branches)
-> Set (combine into single prompt string)
-> HTTP Request -> Claude API
Prompt: "Summarize this morning's briefing: {combined_data}"
-> Send Email, Slack, or DiscordAppend an ingress entry to the existing cloudflared config when external webhook access is needed:
ingress:
- hostname: n8n.yourdomain.com
service: http://192.168.0.81:5678
- service: http_status:404Restart the tunnel after config changes:
systemctl restart cloudflared# Check n8n service status
pct exec 104 -- systemctl status n8n
# View logs
pct exec 104 -- journalctl -u n8n -f
# Restart n8n
pct exec 104 -- systemctl restart n8n
# Update n8n
pct exec 104 -- npm update -g n8n| Service | Credential Type | Key Fields |
|---|---|---|
| Anthropic Claude | Header auth | x-api-key |
| CoinGecko | None for the free tier | None |
| Alpaca | Header auth | APCA-API-KEY-ID, APCA-API-SECRET-KEY |
| OAuth2 | client_id, client_secret | |
| SMTP or email | SMTP | host, port, user, pass |
content[0].textIf the user is not sure how to use this skill, asks what it needs, or asks for examples:
Minimum useful input:
Example prompts:
Use n8n-workflow to design an n8n flow that ingests a JSON file and sends a Teams alert.Help me troubleshoot this n8n workflow that is failing after the HTTP request node.Show me a sample prompt for asking this skill to build a workflow step by step.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.