n8n-node-configuration Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• SKILL.md references n8n-mcp tools such as get_node, validate_node, and patchNodeField, but does not clearly state the required setup, prerequisites, or tool availability.
• The skill mentions dynamic properties and n8n_explore_node_resources, but the excerpt ends mid-sentence; ensure the full SKILL.md and linked documents are complete and not truncated in the repository.
• Some metrics like '56 seconds average between configuration edits' are presented without source or justification, which may be confusing or unverifiable for users.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: secrets or environment access, network or browser access
• Dependency/runtime risk: credential or environment access, network or browser surface
• Permission surface: secrets or environment access, network or browser access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.