ClawHub
Back to skill

Security audit

N8n Dispatch

Security checks across malware telemetry and agentic risk

Overview

This skill transparently forwards user-provided requests to a configured n8n service, with privacy and input-validation caveats but no evidence of hidden or malicious behavior.

Install only if you control or trust the n8n_dispatch service you register. Do not send secrets or sensitive personal data unless that workflow is approved to receive it, prefer HTTPS or a trusted local/private endpoint, and add validation plus confirmation gates in n8n for workflows that perform actions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly forwards the raw user prompt to an external MCP/n8n service, but the description does not clearly warn users that their input leaves the local agent context and is sent to another system. This creates a real transparency and data-handling risk because users may provide sensitive information under the assumption the prompt is only processed locally.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The dispatch command is described only as forwarding a request to an MCP service, with no meaningful trigger constraints or safety boundaries on when it should be invoked. Because it accepts the user's prompt exactly as entered and forwards it to a downstream automation service, ambiguous activation increases the chance of unintended or unsafe invocation, including relaying sensitive or adversarial input to external workflow execution.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.