n8n Hub

Centralized n8n hub for designing reliable flows (idempotency, retries, HITL) and operating them via the public REST API. Use for planning, JSON output, and lifecycle actions like list/publish/debug.

What to consider before installing: - The skill is instruction-only and would make API calls to your n8n instance using N8N_API_KEY and N8N_API_BASE_URL, but the skill metadata does not declare those required env vars — treat that as an oversight and assume the skill needs them. - Many endpoints shown (users, credentials, delete) are admin-level. Only provide an API key with the minimum privileges needed — ideally test with a staging instance or a read-only/scoped key first. - Because the skill runs network commands (curl), the agent could create, modify, or delete workflows, executions, users, or credentials if given a powerful key; confirm you trust the agent and the skill author before handing over production credentials. - Prefer using a dedicated n8n account/project with limited permissions, or rotate the API key after testing. - If you need higher assurance: ask the skill author to update registry metadata to explicitly require N8N_API_KEY/N8N_API_BASE_URL and to document the exact privilege level required; verify the skill's author/source and test on a non-production instance. Confidence notes: the assessment is medium confidence because the skill is coherent with its stated purpose, but metadata omissions and the implicit need for privileged API access create meaningful risk — additional author/source information or explicit required-env declarations would raise confidence to benign.

Type: OpenClaw Skill Name: n8n-hub Version: 1.0.0 The skill is designed to interact with the n8n API for managing workflows and executions. All `curl` commands provided in `SKILL.md` are directly related to this stated purpose. While `assets/endpoints-api.md` lists sensitive API endpoints (e.g., for users, credentials, variables), this file serves as documentation for the n8n API itself, and the skill does not provide examples or instructions to misuse these sensitive endpoints. Furthermore, `SKILL.md` explicitly discourages bypassing security controls, and `assets/workflow-lab.md` instructs the agent not to include secrets in generated outputs, indicating a security-conscious design.