homeassistant-n8n-agent
Connects OpenClaw with n8n for automating Home Assistant tasks through IoT device management.
Install this skill
or
43/100
Security score
The homeassistant-n8n-agent skill was audited on Feb 11, 2026 and we found 19 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 12
Curl to non-GitHub URL
SourceSKILL.md
| 12 | Uses curl to trigger a n8n workflow for all things related to IoT. All requests should be a POST formatted as follows: curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 |
medium line 26
Curl to non-GitHub URL
SourceSKILL.md
| 26 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "turn off the office light", "requestType": "action", "sessionId": |
medium line 28
Curl to non-GitHub URL
SourceSKILL.md
| 28 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "change the downstairs thermostat to 72", "requestType": "action", |
medium line 33
Curl to non-GitHub URL
SourceSKILL.md
| 33 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "when was the front door last opened?", "requestType": "historical |
medium line 38
Curl to non-GitHub URL
SourceSKILL.md
| 38 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "is the air conditioner running?", "requestType": "state, "session |
medium line 43
Curl to non-GitHub URL
SourceSKILL.md
| 43 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "when is my next meeting?", "requestType": "calendar, "sessionId": |
medium line 12
Webhook reference - potential data exfiltration
SourceSKILL.md
| 12 | Uses curl to trigger a n8n workflow for all things related to IoT. All requests should be a POST formatted as follows: curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 |
low line 26
Webhook reference - potential data exfiltration
SourceSKILL.md
| 26 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "turn off the office light", "requestType": "action", "sessionId": |
low line 28
Webhook reference - potential data exfiltration
SourceSKILL.md
| 28 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "change the downstairs thermostat to 72", "requestType": "action", |
low line 33
Webhook reference - potential data exfiltration
SourceSKILL.md
| 33 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "when was the front door last opened?", "requestType": "historical |
low line 38
Webhook reference - potential data exfiltration
SourceSKILL.md
| 38 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "is the air conditioner running?", "requestType": "state, "session |
low line 43
Webhook reference - potential data exfiltration
SourceSKILL.md
| 43 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "when is my next meeting?", "requestType": "calendar, "sessionId": |
low line 4
External URL reference
SourceSKILL.md
| 4 | homepage: https://n8n.io/ |
low line 12
External URL reference
SourceSKILL.md
| 12 | Uses curl to trigger a n8n workflow for all things related to IoT. All requests should be a POST formatted as follows: curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 |
low line 26
External URL reference
SourceSKILL.md
| 26 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "turn off the office light", "requestType": "action", "sessionId": |
low line 28
External URL reference
SourceSKILL.md
| 28 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "change the downstairs thermostat to 72", "requestType": "action", |
low line 33
External URL reference
SourceSKILL.md
| 33 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "when was the front door last opened?", "requestType": "historical |
low line 38
External URL reference
SourceSKILL.md
| 38 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "is the air conditioner running?", "requestType": "state, "session |
low line 43
External URL reference
SourceSKILL.md
| 43 | curl -X POST http://localhost:5678/webhook/05f3f217-08b9-42de-a84a-e13f135bde73 -H "Content-Type: application/json" -d '{"chatInput": "when is my next meeting?", "requestType": "calendar, "sessionId": |
Scanned on Feb 11, 2026
View Security Dashboard