ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

n8n Workflow Templates

v1.0.0

Production-ready n8n workflow templates for AI agents. Deploy pre-built automations for webhooks, RSS monitoring, health checks, social metrics, and data bac...

⭐ 0· 957·5 current·6 all-time
by@yoder-bawt
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
Name, description, scripts, and JSON templates all align: this package provides n8n workflow templates and small bash utilities to deploy/list/manage workflows. Requested binaries (curl, bash) and env vars (N8N_HOST, N8N_API_KEY) are relevant. However, the templates and scripts implicitly rely on additional runtime capabilities not declared (see below), which is an inconsistency with the declared requirements.
!
Instruction Scope
SKILL.md and README instruct running the included scripts and editing templates, but they do not call out that several templates include executeCommand nodes that will run shell commands (e.g., df, pg_dump, ls) inside the n8n runtime and that code nodes reference environment variables within n8n. The documentation also omits that deploy/list scripts use python3 for JSON parsing/pretty-printing even though python3 is not listed as a required binary. These omissions expand the runtime scope beyond what the skill declares.
✓
Install Mechanism
No install spec — instruction-only with bundled scripts and templates. Nothing is downloaded or executed automatically during installation; files are local and visible for review. This is low install risk.
!
Credentials
Declared required env vars are only N8N_HOST and N8N_API_KEY (which are appropriate). However: (1) multiple templates reference TELEGRAM_CHAT_ID via n8n's {{$env.VAR}} expression (or otherwise expect platform API credentials) but TELEGRAM_CHAT_ID is not declared in requires.env, (2) templates expect external service credentials (Twitter, LinkedIn, Telegram) to be configured in n8n credentials or environment but the skill metadata doesn't enumerate these, and (3) scripts invoke python3 though python3 is not listed in required binaries. These are mismatches between what is declared and what the templates actually require to function.
✓
Persistence & Privilege
always:false and user-invocable:true. The skill does not request permanent presence or modify other skills. There is no autonomous installation hook or elevated platform privileges requested.
What to consider before installing
This package appears to be what it says (n8n workflow templates + small bash helpers), but before using it: 1) Review each workflow JSON—some templates include executeCommand nodes that will run shell commands (pg_dump, df, ls, etc.) inside the n8n process; only deploy these to a controlled host where running those commands is safe and expected. 2) Ensure python3 is available on the machine where you run the included scripts (deploy/list scripts call python3 for JSON parsing/formatting) or edit the scripts to remove that dependency. 3) The templates reference TELEGRAM_CHAT_ID via environment expressions and expect external platform credentials (Telegram, Twitter, LinkedIn, DB credentials) to be set in your n8n instance; these are not declared as required env vars in the skill metadata—set them intentionally in n8n or replace the placeholders with proper credentials. 4) Do not deploy these templates to shared or multi-tenant n8n instances without auditing the executeCommand nodes and replacing any commands that could leak data or escalate privileges. 5) If you need higher confidence, ask the author for an explicit list of runtime requirements (python3, any n8n env vars like TELEGRAM_CHAT_ID) and confirm whether executeCommand nodes assume access to local databases/files.

Like a lobster shell, security has layers — review code before you run it.

automationvk97e24xecadc7adhe8kg5by6v181dwc7latestvk97e24xecadc7adhe8kg5by6v181dwc7n8nvk97e24xecadc7adhe8kg5by6v181dwc7templatesvk97e24xecadc7adhe8kg5by6v181dwc7workflowvk97e24xecadc7adhe8kg5by6v181dwc7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscurl, bash
EnvN8N_HOST, N8N_API_KEY

Comments