n8n-security-testing

Scan n8n workflows for credential exposure and security vulnerabilities.

2|2|Updated Aug 23, 2025
One-click install
npx skills add https://github.com/summarybotng/summarybot-ng --skill n8n-security-testing-summarybotng
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: n8n-security-testing
Source: https://github.com/summarybotng/summarybot-ng/tree/main/.claude/skills/n8n-security-testing
Command: npx skills add https://github.com/summarybotng/summarybot-ng --skill n8n-security-testing-summarybotng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill identifies and mitigates critical security vulnerabilities within n8n workflows, protecting sensitive data and preventing unauthorized access.

Core Features & Use Cases

  • Credential Exposure Detection: Scans workflows for hardcoded API keys, passwords, and tokens.
  • OAuth Flow Validation: Verifies secure handling and encryption of OAuth tokens.
  • Data Sanitization & Logging: Ensures sensitive data is not leaked through logs or error messages.
  • Use Case: A security auditor needs to quickly assess the security posture of a newly deployed n8n instance. This Skill can perform a comprehensive scan of all active workflows to identify and report on potential security risks.

Quick Start

Run a security scan on the n8n workflow with ID 'wf_123abc'.

Frequently Asked Questions about n8n-security-testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan n8n workflows for hardcoded API keys and exposed credentials?

Scanning n8n workflows for credential exposure involves detecting hardcoded API keys, passwords, and tokens within your configurations. This process automatically identifies sensitive data embedded in active workflows to prevent unauthorized access and secure your instances.

What is OAuth flow validation and how does it secure n8n instances?

OAuth flow validation in n8n verifies the secure handling and encryption of OAuth tokens. It ensures that authentication tokens are correctly managed within workflows, preventing token interception and unauthorized API access.

How do I prevent sensitive data from leaking in n8n error logs?

Preventing sensitive data leaks in n8n requires data sanitization and logging controls. You must implement workflow configurations that strip or mask sensitive information before it is written to logs or error messages.

Can I assess the security posture of a newly deployed n8n instance automatically?

You can assess the security posture of a newly deployed n8n instance by running comprehensive security scans. These scans validate all active workflows against common vulnerabilities and security best practices to generate a risk report.

What is the best way to validate API key management in n8n workflows?

The best way to validate API key management in n8n workflows is to perform comprehensive security testing. This approach audits how keys are stored, passed, and encrypted, ensuring credentials are not exposed in plaintext.