n8n-security-testing

Detect credential exposure and validate OAuth flows in n8n workflows.

1|Updated Dec 29, 2025
One-click install
npx skills add https://github.com/aquariuscook/Agent_Modus_Map --skill n8n-security-testing-aquariuscook
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: n8n-security-testing
Source: https://github.com/aquariuscook/Agent_Modus_Map/tree/main/.claude/skills/n8n-security-testing
Command: npx skills add https://github.com/aquariuscook/Agent_Modus_Map --skill n8n-security-testing-aquariuscook

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses critical security vulnerabilities within n8n workflows, protecting sensitive data and preventing unauthorized access by identifying and mitigating risks related to credential exposure, data leakage, and insecure configurations.

Core Features & Use Cases

  • Credential Exposure Detection: Scans workflows for hardcoded API keys, passwords, and tokens.
  • Data Leakage Prevention: Analyzes execution logs and error messages for sensitive information.
  • Webhook Security: Tests authentication and input validation for webhook endpoints.
  • Expression Security: Identifies dangerous JavaScript expressions that could lead to code execution.
  • Use Case: Before deploying a new n8n workflow that handles customer data, use this Skill to perform a comprehensive security audit, ensuring no credentials are exposed and all data handling is secure.

Quick Start

Use the n8n-security-testing skill to scan the provided n8n workflow for any security vulnerabilities.

Frequently Asked Questions about n8n-security-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan n8n workflows for hardcoded credentials and API keys?

Scanning n8n workflows for hardcoded credentials involves analyzing workflow JSON files to detect exposed API keys, passwords, and tokens. This automated security assessment validates credential management and prevents unauthorized data access.

What is data leakage in n8n execution logs and how is it detected?

Data leakage in n8n execution logs occurs when sensitive information is exposed in error messages or execution outputs. It is detected by analyzing execution logs to identify and prevent the unauthorized logging of sensitive customer data.

How do I test webhook security and authentication in n8n?

Testing webhook security in n8n requires verifying authentication mechanisms and input validation for webhook endpoints. Analyzing webhook configurations ensures endpoints are secured against unauthorized access and malicious inputs before workflow deployment.

Can I identify dangerous JavaScript expressions in n8n workflows?

You can identify dangerous JavaScript expressions in n8n workflows by scanning for insecure expressions that could lead to code execution. Expression security analysis detects potential vulnerabilities within the workflow logic to ensure robust security posture.

Does n8n security testing validate OAuth flows and data sanitization?

n8n security testing validates OAuth flows and verifies data sanitization by performing a comprehensive security audit of the workflow. This requires detailed analysis of workflow JSON, execution logs, and webhook configurations to ensure robust security posture.