N8n Dispatch

Forwards user requests labeled state, action, or historical with text prompts to a configured n8n_dispatch MCP service and returns its response.

This skill simply forwards the supplied requestType and text to whatever n8n endpoint you register with mcporter. Before using it: (1) only register trusted n8n endpoints (prefer HTTPS and authenticated endpoints), (2) review the n8n workflow to ensure it won't leak or store sensitive data, (3) avoid sending secrets or credentials in prompts, and (4) consider using a local or internal n8n instance rather than a public URL. The skill's package lacks a homepage or provenance metadata — if you need stronger assurance, ask the publisher for source code or documentation before enabling it in production.

Type: OpenClaw Skill Name: n8n-dispatch Version: 1.0.0 The skill is designed to forward user input to a user-configured external n8n service, which inherently involves network communication. However, the `commands.yaml` script constructs a JSON payload by directly embedding the user-provided `text` argument (`$prompt`) into a shell string without proper JSON escaping. This vulnerability could allow a malicious user to craft a `prompt` that alters the JSON structure sent to the n8n service (JSON injection), potentially leading to unexpected behavior or security bypasses on the downstream service. While not a direct attack on the OpenClaw agent's host, it represents a risky handling of user input.