RiskVoid Security icon

RiskVoid Security

Your ultimate n8n workflow security scanner. Detect code injection, SSRF, SQL injection, and other vulnerabilities before they reach production.

Actions3

Scan Current Workflow

AI-generated

Summary

Scan the currently running n8n workflow for various security vulnerabilities based on configured analysis options, and generate a detailed security report in selectable formats.

Inputs

  • categories — Filter the scan to report issues in specific vulnerability categories such as Code/Command Injection, Credential Exposure, Information Disclosure, Prompt Injection, Security Misconfiguration, and SSRF. Leaving empty scans all categories.
  • exportFormat (required) — Choose the output format for the security report: JSON (default), HTML report with visualizations, Slack Blocks JSON for Slack integration, or SARIF standard for CI/CD tools.
  • includeMermaid — When exporting to JSON or HTML, optionally include a Mermaid.js diagram visualizing the workflow's structure.
  • includeRemediation — Include detailed remediation guidance for each identified finding in the report.
  • minSeverity (required) — Set the minimum severity level of vulnerabilities to include in the report, from Info (all) through Low, Medium (default), High, to Critical only.
  • outputFormat (required) — Select the level of detail in the report: full detailed report, summary with risk score and statistics only, or just the list of findings.

Output shape

a single JSON object or string representing the security analysis report according to chosen export format

Report output format depends on 'exportFormat' input, supporting JSON, self-contained HTML, Slack Block Kit JSON, or SARIF 2.1.0 format. The content detail depends on 'outputFormat'; visualization inclusion depends on 'includeMermaid'. The analysis covers all nodes and connections within the current workflow loaded in n8n at execution time, applying multiple vulnerability detection rules and filtering by severity and categories as configured.

Examples

Example 1: Default scan with medium severity filter and full report in JSON.

categories: [], exportFormat: json, includeMermaid: false, includeRemediation: true, minSeverity: medium, outputFormat: full

Example 2: Scan only for Command Injection and SSRF vulnerabilities, output summary in HTML with Mermaid diagram.

categories: [command-injection, ssrf], exportFormat: html, includeMermaid: true, includeRemediation: true, minSeverity: low, outputFormat: summary

Links

Discussion