n8n
What this skill does
Workflow management and automation for n8n platform
github/leoyeai - Secrets Management - 2.1k stars
Threat analysis
Skill info
pkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=n8nAssessments (2)
Secrets Management
Secrets Management via local-llm-review
scripts/n8n_api.py
The N8nClient class reads N8N_API_KEY and N8N_BASE_URL from environment variables without any validation or obfuscation. These are sensitive credentials that could be exposed if the environment is comAPI Security
API Security via local-llm-review
scripts/n8n_api.py
The _request method in N8nClient makes API calls without implementing rate limiting, request signing, or other security measures that would protect against abuse or unauthorized access.Badge
Add the Anomity scan badge for n8n to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of n8n? Report an issue or request a rescan.
