N8N Code Automation

⚠️ SECURITY CRITICAL UPDATE (v1.1.0)

This version addresses CRITICAL SECURITY VULNERABILITIES present in v1.0.0:

✅ Fixed Vulnerabilities

1. 1. Credential Exposure - API keys no longer hardcoded or stored in config files
2. Hardcoded URLs - Removed hardcoded nelflow.cloud domain, now configurable
3. Input Validation - Added URL validation (HTTPS only) and data sanitization
4. No Audit Logging - Complete audit trail with timestamps implemented
5. No Rate Limiting - Configurable rate limits to prevent abuse
6. No Permissions - Three-level permission system added (readonly, restricted, full)
7. No Confirmation - Two-factor confirmation for dangerous operations

🔐 New Security Features

• - Credential Isolation: API keys stored ONLY in environment variables
• Input Validation: URL format validation + data sanitization
• Audit Logging: Complete action trail in INLINECODE1
• Rate Limiting: Configurable limits (10 req/min by default)
• Granular Permissions: 3 levels - readonly, restricted, full
• HTTPS Enforcement: Only HTTPS connections allowed
• Confirmation Required: Two-factor for dangerous operations

📋 Migration from v1.0.0

If you were using v1.0.0, please migrate:

1. 1. Remove credentials from config:

1. 2. Set environment variables:

1. 3. Set permission mode (optional):

See SECURITY section below for complete migration guide.

Overview

Enable n8n workflow automation capabilities for coding tasks. Use n8n to build, manage, and execute automated workflows that integrate with your development processes, CI/CD pipelines, data processing, and API integrations.

Configuration

Connection Details

• - URL: Configurable via environment variable (REQUIRED)
• API Key: Available in n8n (Settings → API → API Key)
• Header: INLINECODE2
• Base Path: INLINECODE3

Authentication (SECURE - v1.1.0)

⚠️ IMPORTANT: API keys MUST be stored as environment variables, NEVER in config files.

Do NOT do this:
CODEBLOCK3

✅ CORRECT approach:
CODEBLOCK4

Permission Modes (NEW - v1.1.0)

The skill operates in three permission modes:

• * Requires explicit confirmation for each operation

Default mode: INLINECODE7

To change mode:
CODEBLOCK5

Available Actions

🟢 Read-Only Operations (Safe)

1. List Workflows

Response:

{
  "data": [
    {
      "id": "abc123",
      "name": "Example Workflow",
      "nodes": [...],
      "connections": {...},
      "active": true,
      "settings": {}
    }
  ]
}

2. Get Workflow Status

curl -X GET "$N8N_URL/api/v1/workflows/abc123" \
  -H "X-N8N-API-KEY: $N8N_API_KEY" \
  -H "Content-Type: application/json"

3. Get Executions

Filter options:

• - ?limit=10 - Limit results
• INLINECODE9 - Start date
• INLINECODE10 - End date
• INLINECODE11 - Filter by status

4. Get Execution Details

🟡 Execute Operations (Requires Permission)

5. Execute Workflow (Manual)

Confirmation required: The skill will ask for approval before execution.

CODEBLOCK11

6. Execute Workflow (with Inputs)

curl -X POST "$N8N_URL/api/v1/workflows/{id}/executions" \
  -H "X-N8N-API-KEY: $N8N_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "data": {
      "contextData": {
        "input": {
          "parameter1": "value1",
          "parameter2": "value2"
        }
      }
    }
  }'

7. Execute Webhook

🔴 Dangerous Operations (Requires Explicit Confirmation)

⚠️ These operations require TWO confirmations:

1. 1. Display of what will be changed
2. Typing confirmation phrase

8. Clone Workflow

CODEBLOCK14

9. Update Workflow (PATCH)

CODEBLOCK15

10. Delete Workflow

CODEBLOCK16

Coding Use Cases

Use Case 1: CI/CD Integration

Scenario: Trigger build/test workflows from code commits.

CODEBLOCK17

Use Case 2: Data Processing Pipeline

Scenario: Process and transform data automatically.

Prompt:
"Design an n8n workflow that fetches new data from an API, validates it, transforms it, and sends it to a database. Use HTTP Request nodes for API calls, Function nodes for validation and transformation, and Database nodes for storage."

Use Case 3: Automated Testing

Scenario: Run test suites automatically and send results to Slack.

Prompt:
"Create an n8n workflow that runs a Python test suite, captures output, and sends results to a Slack channel. Include HTTP Request nodes to trigger tests and a Slack node to send formatted results."

Use Case 4: Scheduled Maintenance

Scenario: Execute periodic maintenance tasks.

Prompt:
"Set up an n8n workflow that runs every morning at 6 AM to:

1. 1. Check database performance metrics
2. Backup important files
3. Send a summary to my email

Use Case 5: API Integration

Scenario: Connect multiple services via automated workflows.

Prompt:
"Create an n8n workflow that:

1. 1. Monitors a monitoring service (like Datadog or Prometheus)
2. If an alert is triggered
3. Notifies Slack and Telegram
4. Creates a ticket in Jira/Trello
5. Sends an email to team

Security (NEW - v1.1.0)

Input Validation (NEW)

CODEBLOCK18

Data Sanitization (NEW)

CODEBLOCK19

Audit Logging (NEW)

All actions are logged to:
CODEBLOCK20

Log format:
CODEBLOCK21

Rate Limiting (NEW)

Default limits (configurable):

Best Practices

Security

1. 1. Never hardcode API keys in code or workflows
2. Use environment variables or secrets management
3. Restrict workflow permissions in n8n settings
4. Enable rate limiting to prevent abuse
5. Use HTTPS only - enforce encrypted connections

Organization

1. 1. Name workflows descriptively (e.g., "GitLab CI Trigger" vs "Workflow 1")
2. Use consistent naming conventions across your organization
3. Document workflow purposes in description field
4. Create folder structure in n8n for better organization

Error Handling

1. 1. Add error nodes to catch and handle failures
2. Log execution results for debugging
3. Set up notifications for failed executions
4. Implement retry logic for transient failures

Testing

1. 1. Test workflows manually before automation
2. Use test data in development
3. Monitor execution logs regularly
4. Document expected behavior and success criteria

Common Workflows

Webhook to Database

CODEBLOCK22

Scheduled Data Sync

CODEBLOCK23

Troubleshooting

Authentication Error

Error: Unauthorized

Workflow Not Found

Error: Workflow not found

Execution Failed

Error: Execution failed

Rate Limit Exceeded

Error: Rate limit exceeded

Input Validation Error

Error: Invalid URL - Must be HTTPS

Quick Start

1. Set Environment Variables (REQUIRED):
CODEBLOCK29

2. Set Permission Mode (OPTIONAL):
CODEBLOCK30

3. List workflows:
CODEBLOCK31

4. Execute a workflow:
CODEBLOCK32

5. Start building:

• - Copy workflow examples
• Modify nodes for your needs
• Test thoroughly before automation
• Monitor and iterate

References

• - N8N Documentation: https://docs.n8n.io
• N8N API Reference: https://docs.n8n.io/api/
• N8N Webhooks: https://docs.n8n.io/workflows/webhooks/
• Community Workflows: https://community.n8n.io/
• Node Reference: https://docs.n8n.io/nodes/

Changelog

v1.1.0 - 2024-04-04 - CRITICAL SECURITY UPDATE

• - ✅ Fixed credential exposure (removed hardcoded API keys from examples)
• ✅ Removed hardcoded URLs (now configurable via environment variables)
• ✅ Added input validation (URL format + data sanitization)
• ✅ Implemented audit logging (complete action trail)
• ✅ Added rate limiting (configurable limits)
• ✅ Implemented granular permissions (3 levels: readonly, restricted, full)
• ✅ Added two-factor confirmation for dangerous operations
• ✅ Enforced HTTPS only
• ✅ Updated all documentation with security warnings
• ✅ Migration guide from v1.0.0

v1.0.0 - Initial release (INSECURE - DO NOT USE)

• - Original version with critical security vulnerabilities
• ⚠️ DEPRECATED - Please migrate to v1.1.0 or later