N8n Integration

实现 n8n 与 OpenClaw Agent 的双向集成，支持Webhook触发执行、结果回调、认证验证及可观测性。

This package does implement an n8n webhook server and agent adapter, but pay attention to these points before installing: - Manifest vs. reality: The registry declares no required env vars, but the code uses several (N8N_AUTH_TOKEN, WEBHOOK_SECRET, N8N_BASE_URL, N8N_API_KEY, N8N_PORT, N8N_VERBOSE). Treat these as required and supply secure values. - Token leakage risk: The server will POST results to any callbackUrl provided by a webhook request and it includes the server's auth token in the X-N8N-Token header. Do not allow untrusted parties to control callbackUrl, or modify the code to avoid sending your auth token to external endpoints. - Verify secrets: Use strong values for N8N_AUTH_TOKEN/WEBHOOK_SECRET and rotate them periodically. In production, run behind HTTPS and firewall rules; avoid binding to 0.0.0.0 on public hosts unless intended. - Review and harden code: Consider removing or replacing the deprecated npm 'crypto' package (use Node's built-in crypto), validate callback URLs against an allowlist, and avoid sending internal auth headers to external callback endpoints. - Run in isolation: Start the server in a controlled environment (test VM or container) and review network traffic (eg. with a web proxy) before deploying to production. Given the credential handling and manifest inconsistencies, treat this skill as suspicious until the above issues are addressed or clarified by the author.

Type: OpenClaw Skill Name: yuyonghao-n8n-integration Version: 0.1.1 The skill bundle provides a legitimate integration between OpenClaw and the n8n automation platform. It implements a webhook server (src/webhook-server.js) to receive triggers and an API client (src/n8n-client.js) to interact with n8n workflows, including support for token-based authentication and HMAC signature verification. No evidence of malicious intent, data exfiltration, or prompt injection was found; the code logic is consistent with its stated purpose of workflow automation.