n8n

@n8n/instance-ai

1780e739-265b-5798-bcf4-ed41dd58afb4 | v1.24.7
83/ 100
HIGH risk
No change since v1.24.6
Risk verdict
Review before use

Score-based assessment (high risk, 83/100). No analyst review available.

Analysis record

Analysed
Today
Version
v1.24.7
Artifact
SHA256 A47…109
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

599 detail rows
Showing 25 of 50 · highest severity first

YARA Rule Matches

12 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall obfuscation 101
dist/parsers/validate-attachments.d.tsdist/workspace/sandbox-fs.jsskills/data-table-manager/SKILL.md +98 more
-
LOWpostinstall system command 124
dist/workspace/lazy-runtime-workspace.jsdist/index.jsskills/credential-setup-with-computer-use/SKILL.md +121 more
-
LOWpostinstall crypto operations 39
dist/skills/materialize-runtime-skills.d.tsdist/workspace/workspace-manifest.jsdist/runtime/resumable-stream-executor.js +36 more
-
LOWpostinstall network communication 88
dist/tools/evals/format-eval-setup-task.jsdist/tools/workflows/preserve-node-positions.jsdist/mcp/connected-mcp-services.d.ts +85 more
-
LOWpostinstall registry modification 49
dist/tools/n8n-docs/registry.js.mapdist/knowledge-base/materialize-knowledge-base.jsdist/tools/filesystem/create-tools-from-mcp-server.d.ts +46 more
-
LOWpostinstall environment access 22
dist/tools/workflows/workflow-source-materializer.d.tsdist/workspace/sandbox-fs.d.tsdist/agent/sanitize-mcp-schemas.d.ts +19 more
-
LOWpostinstall file manipulation 68
dist/workspace/create-workspace.jsdist/tools/workflows/workflow-file-bindings.jsskills/data-table-manager/SKILL.md +65 more
-
LOWpostinstall file download 38
dist/tools/research.tool.jsdist/tools/n8n-docs/registry.d.tsdist/domain-access/domain-access-tracker.js +35 more
-
LOWNoUseWeakRandom 1
dist/workspace/sandbox-fs.js
-
LOWUsingCommandLineArguments 2
dist/workspace/sandbox-setup.jsdist/workspace/sandbox-setup.d.ts
-
LOWcredential env files 10
dist/mcp/mcp-client-manager.jsdist/utils/custom-model-defaults.jsdist/workspace/sandbox-setup.js +7 more
-
LOWpostinstall persistence mechanism 7
dist/tools/orchestration/plan.tool.jsdist/build.tsbuildinfoskills/one-off-operations/SKILL.md +4 more
-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

2,898 total
...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Finding Categories

4
Network
2,898
IoC Indicators

YARA Rules Matched

12 rules(549 hits)
postinstall obfuscation postinstall system command postinstall crypto operations postinstall network communication postinstall registry modification postinstall environment access postinstall file manipulation postinstall file download NoUseWeakRandom UsingCommandLineArguments credential env files postinstall persistence mechanism

Security Analysis Summary

Security Analysis Overview

@n8n/instance-ai is a n8n Community Nodes extension published by GitHub Actions. Version 1.24.7 has been analyzed by the Risky Plugins security platform, receiving a risk score of 83.31/100 (HIGH risk) based on 3497 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • Critical: 1 finding(s)
  • Medium: 2922 finding(s)
  • Low: 574 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

@n8n/instance-ai is published by GitHub Actions on the n8n Community Nodes marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

n8n version history

Risk trend by version

18 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
83
Change since first
+24
Change from previous
No change
Versions:
First analyzed version
1.13.3
Jul 1, 2026
Risk range
60 to 83
Across analyzed versions
Latest analyzed version
1.24.7
Sep 21, 2026
Selected version
high
Version
v1.24.7
Today
Risk score
83
Findings
3497
Change vs previous
No change

Pick any point on the chart to explore that version's code below.

About This Extension

Instance AI is the agent runtime behind the AI assistant experience in n8n. It lets users ask for help with workflows, executions, credentials, nodes, and workflow building from inside an n8n instance.

Frequently Asked Questions