N8n Workflow Automation.Local.Backup

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A generated workflow could affect external accounts or records after the user imports and enables it.

Why it was flagged

The skill can generate importable automations that may send or write data once a user imports and activates them in n8n. This is purpose-aligned and mitigated by explicit-request and inactive-by-default guidance.

Skill content
Targets: where to write results (email/Drive/Sheet/DB) ... If explicitly requested: `workflow.json` (n8n importable JSON)
Recommendation

Review the generated workflow JSON, keep it inactive until checked, and use least-privilege credentials for any connected services.

What this means

It may be harder to confirm that this is the intended package or publisher.

Why it was flagged

The supplied registry metadata differs from the included _meta.json owner/slug values, creating a package-identity/provenance ambiguity. No runnable code or install step is present, so this is a verification note rather than a behavior concern.

Skill content
Registry slug: n8n-workflow-automation-local-backup; _meta.json slug: "n8n-workflow-automation"
Recommendation

Verify the intended source, slug, and owner before installing or relying on the skill.