mcp-n8n-workflow-builder
Generates and validates n8n workflows programmatically, simplifying the creation process with a reusable MCP server tool.
Install this skill
or
89/100
Security score
The mcp-n8n-workflow-builder skill was audited on May 12, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 160
Template literal with variable interpolation in command context
SourceSKILL.md
| 160 | throw new McpError(ErrorCode.MethodNotFound, `Unknown tool: ${request.params.name}`); |
low line 204
Webhook reference - potential data exfiltration
SourceSKILL.md
| 204 | { "type": "n8n-nodes-base.webhook", "name": "Webhook Trigger", "parameters": { "path": "incoming" } }, |
low line 209
Webhook reference - potential data exfiltration
SourceSKILL.md
| 209 | { "source": "Webhook Trigger", "target": "Transform Data" }, |
low line 220
Webhook reference - potential data exfiltration
SourceSKILL.md
| 220 | { "type": "n8n-nodes-base.webhook", "name": "Webhook Trigger", "parameters": { "path": "incoming" }, "position": { "x": 100, "y": 100 } }, |
low line 226
Webhook reference - potential data exfiltration
SourceSKILL.md
| 226 | { "node": "Transform Data", "type": "main", "index": 0, "sourceNode": "Webhook Trigger", "sourceIndex": 0 }, |
low line 206
External URL reference
SourceSKILL.md
| 206 | { "type": "n8n-nodes-base.httpRequest", "name": "Send to API", "parameters": { "url": "https://api.example.com/data", "method": "POST" } } |
low line 222
External URL reference
SourceSKILL.md
| 222 | { "type": "n8n-nodes-base.httpRequest", "name": "Send to API", "parameters": { "url": "https://api.example.com/data", "method": "POST" }, "position": { "x": 500, "y": 100 } } |
Scanned on May 12, 2026
View Security Dashboard