Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed n8n automation guide for creating Amazon product videos, with expected third-party API use and spreadsheet updates.
Install only if you intend to run an n8n workflow that shares ASIN, product images, titles, descriptions, and generated video metadata with Apify, Topview AI, and Google Sheets. Use least-privilege API keys and a service account limited to the target spreadsheet, keep secrets out of repositories and screenshots, and consider pinning the n8n Docker image before production use.
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
# 这里使用任务列表接口作为健康检查
# 根据实际API文档调整URL
response = requests.get(
"https://api.topview.ai/v1/m2v/task",
headers=headers,
timeout=10
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
}
# 获取用户信息作为健康检查
response = requests.get(
"https://api.apify.com/v2/users/me",
headers=headers,
timeout=10
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
print_header("创建环境变量模板")
env_content = """# ASIN营销视频流水线配置
# 复制此文件为 .env 并填入实际值
# Google Sheets
GOOGLE_SHEETS_ID=your_spreadsheet_id_here
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
print_header("创建环境变量模板")
env_content = """# ASIN营销视频流水线配置
# 复制此文件为 .env 并填入实际值
# Google Sheets
GOOGLE_SHEETS_ID=your_spreadsheet_id_here
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
print_header("创建环境变量模板")
env_content = """# ASIN营销视频流水线配置
# 复制此文件为 .env 并填入实际值
# Google Sheets
GOOGLE_SHEETS_ID=your_spreadsheet_id_here
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
print_header("创建环境变量模板")
env_content = """# ASIN营销视频流水线配置
# 复制此文件为 .env 并填入实际值
# Google Sheets
GOOGLE_SHEETS_ID=your_spreadsheet_id_here
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
print_header("创建环境变量模板")
env_content = """# ASIN营销视频流水线配置
# 复制此文件为 .env 并填入实际值
# Google Sheets
GOOGLE_SHEETS_ID=your_spreadsheet_id_here
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
print_header("ASIN营销视频流水线配置验证")
# 加载.env文件（如果存在）
env_file = Path(".env")
if env_file.exists():
print(" ℹ️ 加载 .env 文件")
with open(env_file) as f:
The skill describes importing and operating n8n workflows that interact with external services, write files, and update Google Sheets, yet it declares no explicit tool scope or permissions boundaries. This creates an authorization ambiguity where an agent may use network, shell, environment, and file-write capabilities more broadly than the user expects, increasing the risk of unintended external actions or secret exposure during setup and execution.
Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.
The setup guide instructs users to enter API keys and import a Google service-account JSON file, but gives no warning about secure storage, least privilege, rotation, or avoiding exposure in logs, screenshots, backups, and shared n8n instances. In an automation platform handling multiple third-party services, weak credential-handling guidance materially increases the chance of token leakage and unauthorized access.
The workflow posts ASIN-derived data to the Apify API, which is an intentional external transmission but still a real security/privacy concern because data leaves the local automation boundary. In this skill context, third-party scraping is core functionality, which makes the behavior expected, but it remains risky without disclosure, data minimization, and trust review of the external service.
},
{
"parameters": {
"url": "https://api.apify.com/v2/acts/epctex~amazon-product-scraper/run-sync-get-dataset-items",
"method": "POST",
"body": {
"asin": "={{ $json['ASIN'] }}",
This workflow reads spreadsheet-derived ASIN/product data and sends it to Apify and Topview without any in-file disclosure, consent step, or filtering boundary. Even if the data is product-focused, spreadsheet fields and scraped content can contain sensitive business data or unexpected values, creating an avoidable external data-sharing risk.
This node uploads image content to Topview using an API credential, meaning workflow data is transmitted to a third-party video-generation service. Because the skill's purpose is automated marketing-video creation, the transmission is functionally necessary, but it still creates confidentiality and governance risks if the uploaded images or metadata are not vetted.
"parameters": {
"operation": "upload",
"requestOptions": {
"url": "https://api.topview.ai/v1/m2v/image/upload",
"headers": {
"Authorization": "Bearer {{ $credentials.topviewApiKey }}"
}
The workflow sends product title and description content to Topview to create a video task, exposing externally sourced or spreadsheet-linked content to a third party. In this business context that is expected behavior, but unvalidated text can still leak proprietary copy, include unexpected payloads, or violate internal data-sharing rules.
},
{
"parameters": {
"url": "https://api.topview.ai/v1/m2v/task",
"method": "POST",
"body": {
"script_id": "marketing_template_01",
This Python file contains user-facing docstrings and printed setup guidance entirely in Chinese, including operational instructions and status/error messages. That creates a language/locale policy concern because the skill effectively forces one language without any opt-in or explanation that the tool is intended only for a Chinese-speaking or region-specific audience.
This Python file contains its top-level description entirely in Chinese and continues to present all operational prompts and status messages in Chinese. Because the file does not offer any language selection or explain that the skill is intended only for a Chinese-speaking or region-specific environment, it violates the language/locale policy criterion.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 这里使用任务列表接口作为健康检查
# 根据实际API文档调整URL
response = requests.get(
"https://api.topview.ai/v1/m2v/task",
headers=headers,
timeout=10
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 这里使用任务列表接口作为健康检查
# 根据实际API文档调整URL
response = requests.get(
"https://api.topview.ai/v1/m2v/task",
headers=headers,
timeout=10
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 这里使用任务列表接口作为健康检查
# 根据实际API文档调整URL
response = requests.get(
"https://api.topview.ai/v1/m2v/task",
headers=headers,
timeout=10
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 这里使用任务列表接口作为健康检查
# 根据实际API文档调整URL
response = requests.get(
"https://api.topview.ai/v1/m2v/task",
headers=headers,
timeout=10
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 这里使用任务列表接口作为健康检查
# 根据实际API文档调整URL
response = requests.get(
"https://api.topview.ai/v1/m2v/task",
headers=headers,
timeout=10
)
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# 获取用户信息作为健康检查
response = requests.get(
"https://api.apify.com/v2/users/me",
headers=headers,
timeout=10
)
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
# 检查n8n是否安装
import subprocess
try:
result = subprocess.run(
["n8n", "--version"],
capture_output=True,
text=True,
No suspicious patterns detected.