N8n Operator

n8n 工作流助手 - 通过 REST API 设计、创建、修改和管理 n8n 工作流。适合：自动化工程师、DevOps、流程编排。

This skill appears to implement an n8n REST operator, but exercise caution: 1) Review the included Python scripts before use — they expect Python and the 'requests' package (these deps are not declared). 2) Do NOT blindly follow instructions that modify your OpenClaw agent files (e.g., C:\Users\<user>\.openclaw\cron\jobs.json) or that mount your Desktop into containers or run containers as root unless you understand and accept the security implications. 3) Restrict the N8N_API_KEY to a test/dedicated n8n instance and limit its privileges. 4) If you only need API operations, prefer running the client code in an isolated environment (separate VM/container) and avoid host filesystem mappings. 5) If you plan to install, audit the scripts for any file reads/writes or outgoing network calls beyond the n8n API, and add explicit python runtime and dependency declarations before executing. If you are unsure, treat this skill as untrusted until you validate the code and remove or modify instructions that alter host agent config or expose host files.

Type: OpenClaw Skill Name: n8n-operator Version: 2.0.1 The skill bundle provides a comprehensive toolkit for managing n8n workflows via REST API, including Python scripts for API interaction (n8n_api.py) and performance analysis (n8n_optimizer.py). It is classified as suspicious because it contains instructions in SKILL.md and references/desktop-write.md that encourage high-risk system configurations, such as running Docker containers as root (user: '0:0'), bypassing n8n sandboxes to write directly to the host's desktop, and directing the AI agent to manually edit local configuration files at specific hardcoded paths (C:\Users\lujun\.openclaw\cron\jobs.json). While these capabilities are aligned with the stated purpose of advanced workflow automation, they introduce significant security risks and represent a broad attack surface if the agent is exploited via prompt injection.