Is @iflow-mcp/czlonkowski-n8n-mcp safe to use?

@iflow-mcp/czlonkowski-n8n-mcp has a security risk score of 77.05/100 (HIGH risk). Our security analysis detected 8826 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of @iflow-mcp/czlonkowski-n8n-mcp?

Based on our automated security analysis, @iflow-mcp/czlonkowski-n8n-mcp presents high risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

n8n

@iflow-mcp/czlonkowski-n8n-mcp

Name: @iflow-mcp/czlonkowski-n8n-mcp
Availability: InStock
Author: chatflowdev

by chatflowdev

5aff0c09-ca29-5be6-ae09-a18558d4ba6b | v2.36.1

Open marketplace

HIGH risk

Risk verdict

Review before use

Score-based assessment (high risk, 77/100). No analyst review available.

Analysis record

Analysed: 2 weeks ago
Version: v2.36.1
Artifact: SHA256 C1E…ECC
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

627 detail rows

YARA Rule Matches

16 rules

Severity	Rule	Hits	Files	Metadata
HIGH	`LinuxAESDDoS`	1	data/nodes.db	FP 70%
LOW	`credential env files`	35	dist/utils/logger.jsdist/http-server.jsdist/mcp-engine.js +32 more	-
LOW	`postinstall persistence mechanism`	27	dist/telemetry/startup-checkpoints.jsdist/telemetry/startup-checkpoints.d.ts.mapdist/http-server.js +24 more	-
LOW	`postinstall file download`	77	dist/scripts/rebuild.jsdist/scripts/fetch-community-nodes.js.mapREADME.md +74 more	-
LOW	`NoUseEval`	1	dist/services/node-specific-validators.js	-
LOW	`NoUseWeakRandom`	11	dist/triggers/handlers/chat-handler.jsdist/utils/cache-utils.jsdist/mcp/handlers-n8n-manager.js +8 more	-
LOW	`LocalStorageShouldNotBeUsed`	1	data/nodes.db	-
LOW	`UsingCommandLineArguments`	2	dist/scripts/fetch-templates.jsdist/mcp/index.js	-
LOW	`postinstall network communication`	105	dist/telemetry/event-tracker.jsdist/n8n/MCPNode.node.jsdist/mcp/tools.js +102 more	-
LOW	`postinstall system command`	122	dist/scripts/test-execution-filtering.d.ts.mapdist/http-server.jsdist/database/database-adapter.d.ts +119 more	-
LOW	`UsingShellInterpreterWhenExecutingOSCommands`	2	dist/utils/enhanced-documentation-fetcher.jsdist/services/node-specific-validators.js	-
LOW	`postinstall crypto operations`	31	dist/utils/auth.jsdist/triggers/trigger-registry.d.tsdist/services/node-documentation-service.js +28 more	-
LOW	`postinstall obfuscation`	46	dist/services/node-sanitizer.jsdist/scripts/fetch-templates.jsdata/nodes.db +43 more	-
LOW	`postinstall registry modification`	28	dist/mcp/ui/index.jsdata/nodes.dbdist/utils/npm-version-checker.js +25 more	-
LOW	`postinstall environment access`	22	dist/services/node-version-service.d.tsdata/nodes.dbdist/community/community-node-service.d.ts +19 more	-
LOW	`postinstall file manipulation`	92	dist/database/node-repository.jsdist/telemetry/config-manager.jsdist/triggers/types.d.ts +89 more	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

8,199 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Finding Categories

Malware Signatures

Network

8,199

IoC Indicators

YARA Rules Matched

16 rules(603 hits)

LinuxAESDDoS credential env files postinstall persistence mechanism postinstall file download NoUseEval NoUseWeakRandom LocalStorageShouldNotBeUsed UsingCommandLineArguments postinstall network communication postinstall system command UsingShellInterpreterWhenExecutingOSCommands postinstall crypto operations postinstall obfuscation postinstall registry modification postinstall environment access postinstall file manipulation

Security Analysis Summary

Security Analysis Overview

@iflow-mcp/czlonkowski-n8n-mcp is a n8n Community Nodes extension published by chatflowdev. Version 2.36.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 77.05/100 (HIGH risk) based on 8826 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

High: 1 finding(s)
Medium: 8207 finding(s)
Low: 618 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

@iflow-mcp/czlonkowski-n8n-mcp is published by chatflowdev on the n8n Community Nodes marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Integration between n8n workflow automation and Model Context Protocol (MCP)

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

@iflow-mcp/freshtechbro-vibe-coder-mcp

chatflowdev

HIGH

@iflow-mcp/piapi-mcp-server

chatflowdev

MEDIUM

@iflow-mcp/novitalabs-novita-mcp-server

chatflowdev

MEDIUM

@iflow-mcp/ahrefs-mcp-server

chatflowdev

MEDIUM

@iflow-mcp/mcp-selenium

chatflowdev

LOW

@iflow-mcp/eoinjordan-gbstudio-claude-mcp

chatflowdev

LOW

@iflow-mcp/czlonkowski-n8n-mcp

Analysis record

Evidence ledger

NET-SOCKET_IO-dist/templates/template-service.js-223

NET-FETCH-dist/templates/template-service.js-231

NET-FETCH-dist/utils/npm-version-checker.js-20

NET-SOCKET_IO-dist/mcp/tools-n8n-manager.js-556

NET-FETCH-dist/services/config-validator.js-659

NET-FETCH-dist/services/config-validator.js-663

NET-FETCH-dist/mcp/tool-docs/workflow_management/n8n-executions.js-66

NET-SOCKET_IO-dist/mcp/tool-docs/workflow_management/n8n-deploy-template.js-22

DEP-n8n-core-^2.10.1

DEP-express-^5.1.0

DEP-form-data-^4.0.5

DEP-dotenv-^16.5.0

DEP-tslib-^2.6.2

DEP-@modelcontextprotocol/sdk-1.20.1

DEP-uuid-^10.0.0

DEP-n8n-^2.10.3

DEP-lru-cache-^11.2.1

DEP-zod-3.24.1

DEP-@n8n/n8n-nodes-langchain-^2.10.1

DEP-n8n-workflow-^2.10.1

DEP-openai-^4.77.0

DEP-@supabase/supabase-js-^2.57.4

DEP-express-rate-limit-^7.1.5

DEP-sql.js-^1.13.0

YARA Rule Matches

Network Indicators

Finding Categories

YARA Rules Matched

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

About This Extension

Frequently Asked Questions

Similar Extensions

@iflow-mcp/freshtechbro-vibe-coder-mcp

@iflow-mcp/piapi-mcp-server

@iflow-mcp/novitalabs-novita-mcp-server

@iflow-mcp/ahrefs-mcp-server

@iflow-mcp/mcp-selenium

@iflow-mcp/eoinjordan-gbstudio-claude-mcp