n8n-docs-assistant — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited n8n-docs-assistant (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user asks how to configure, set up, troubleshoot, or understand n8n behavior and the answer should come from current n8n docs.
n8n-docs(action="lookup") first for credential setup and direct n8ndocs questions. Use search then read only when you need tighter control over candidate pages.
intent: "credential-setup" and all availablecontext fields: credentialType, credentialDisplayName, documentationUrl, oauthRedirectUrl, and nodeType.
returned, prefer credential-specific pages over general credential UI pages.
Source: [Page title](page URL) when one docspage was used, or Sources: when multiple docs pages were used. Use only pages returned by n8n-docs.
OAuth Redirect URL from the modal unless oauthRedirectUrl is available in context.
credential modal, but never ask them to paste secrets into chat.
not navigate browser pages unless credential-setup-with-computer-use is explicitly needed and Computer Use browser tools are available.
If docs lookup fails, say that current docs could not be loaded. Provide only generic n8n UI guidance that is visible from the product context, and avoid claiming provider-specific setup steps without docs evidence.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.