n8n Workflow Management
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's code, required environment variables, and runtime instructions are consistent with its stated purpose of managing n8n via its API.
This skill appears to do what it says: it interacts with your n8n instance using N8N_API_KEY and N8N_BASE_URL and provides scripts for listing, validating, testing, executing, and optimizing workflows. Before installing or running it: - Verify you trust the source and inspect the included Python scripts (they are present and readable) before running them. They use the n8n API only and do not contain hidden external endpoints. - Understand that 'execute' and 'dry-run' will trigger workflows on your n8n instance; those workflows may call external APIs, send emails, or touch databases depending on their nodes. Review any workflow content you create or execute to avoid unintended side-effects or data leaks. - Avoid pasting long-lived credentials in shell rc files. If you store the N8N_API_KEY in OpenClaw settings.json, ensure that file is stored securely or use a secret manager and least-privilege API key. - Ensure your environment has Python 3 and the 'requests' package available; the skill provides no automated installer for dependencies. If you need a lower blast radius, consider running validation and dry-run operations against a staging n8n instance or use a limited-permission API key.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.