n8n-security-governance

Audit AI-coded n8n workflows for security governance and change-control readiness.

84|23|Updated May 6, 2026
One-click install
npx skills add https://github.com/MorrisLu-Taipei/TigerAI-A2A-Code2n8n-Skill-Pack --skill n8n-security-governance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: n8n-security-governance
Source: https://github.com/MorrisLu-Taipei/TigerAI-A2A-Code2n8n-Skill-Pack/tree/main/skills/tigerai/n8n-security-governance
Command: npx skills add https://github.com/MorrisLu-Taipei/TigerAI-A2A-Code2n8n-Skill-Pack --skill n8n-security-governance

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Review and enforce production-grade security and change-control readiness for AI-coded n8n workflows, ensuring traceability, auditability, and safe deployment.

Core Features & Use Cases

  • Establish scope, trust boundaries, and data handling for n8n workflows.
  • Conduct mandatory security checks (authentication, authorization, injections, secrets, auditability, and rollback).
  • Generate a formal SECURITY-REVIEW.md, SECURITY-CAVEATS.md, CHANGELOG.md, and release traceability records for governance and rollback.
  • Enforce version-control discipline and CI/CD gating for Code2n8n ports.
  • Provide observability and runtime controls for production readiness.

Quick Start

Audit a new Code2n8n port by reviewing its workflow JSON against the governance criteria and generate the audit artifacts.

Frequently Asked Questions about n8n-security-governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit AI-coded n8n workflows for production security governance?

You can enforce change-control readiness for n8n workflows by applying version-control discipline, CI/CD gating, and generating release traceability records to ensure safe deployment and rollback capabilities.

What security checks are mandatory for n8n workflow production deployments?

Mandatory security checks for n8n workflow production deployments include authentication, authorization, injection vulnerabilities, secrets management, auditability, and rollback guidance to ensure comprehensive governance.

How do I generate audit and traceability artifacts for Code2n8n ports?

Generate audit and traceability artifacts for Code2n8n ports by evaluating the workflow against governance criteria, automatically producing SECURITY-REVIEW.md, SECURITY-CAVEATS.md, and CHANGELOG.md files for formal records.

Can I use this skill to establish trust boundaries and data handling rules for n8n workflows?

Yes, this skill establishes scope, trust boundaries, and data handling policies for n8n workflows, ensuring AI-coded automation aligns with strict production security and governance requirements.

What limitations should I consider when enforcing CI/CD gating on n8n workflows?

When enforcing CI/CD gating on n8n workflows, consider that the process strictly requires version-control discipline and proper observability runtime controls to successfully gate Code2n8n ports for release.