Trusera Scan icon

Trusera Scan

Scan n8n workflows for AI security risks using Trusera AI-BOM

Actions2

Scan Workflow JSON

AI-generated

Summary

Scans a single n8n workflow JSON object for AI components, hardcoded credentials, unpinned models, and security vulnerabilities using the Trusera AI-BOM engine.

Inputs

  • jsonField (required) — The key name on the input item's JSON containing the n8n workflow object to analyze. Defaults to 'json', falling back to the root item JSON.
  • filePath — Virtual file path assigned to the workflow in the scan results for reference and reporting. Defaults to 'workflow.json'.

Output shape

a single record

Returns an object with 'components' (array of identified AI tools, models, and security risk flags), 'totalComponents', and 'filePath'. If the input JSON is not a valid n8n workflow (missing 'nodes' or 'connections'), an error object is returned containing an 'error' message, an empty 'components' array, and 'summary: null'.

Examples

Example 1: Scan an n8n workflow passed directly in the root JSON data

Workflow JSON Field: json, File Path: workflow.json

Example 2: Scan workflow JSON stored under a custom property name

Workflow JSON Field: payload, File Path: customer_flow.json

Links

Discussion