Watch it catch a critical in 10 seconds
Real scan of 10 public n8n workflow files pulled from GitHub. Exit code 1 = your CI gate blocks the merge.
pip install flowsentry then flowsentry scan ./workflows --sarif report.sarifFlowSentry scans your n8n workflow exports for unauthenticated webhooks, hardcoded secrets, SSRF, shell injection and 14 more failure modes. 18 rules, zero dependencies, SARIF output, CI-ready.
Real scan of 10 public n8n workflow files pulled from GitHub. Exit code 1 = your CI gate blocks the merge.
pip install flowsentry then flowsentry scan ./workflows --sarif report.sarifWe ran FlowSentry v0.1 on public n8n workflow exports shared on GitHub (shared by their authors for learning/demo purposes — nothing was exploited). Every file had at least one finding.
| Workflow (source) | Critical | Medium | Highlight |
|---|---|---|---|
| WhatsApp AI Bot | 1 | 4 | Webhook with authentication: none, replies echo full internal output |
| Library installer | 2 | 1 | Bash script interpolating {{$json.library}} into a shell command |
| n8n official test workflow #103 | 4 | 2 | echo > /tmp/{{$node["Set"].json["filename"]}} — command injection by design |
| Appointment booking agent | 1 | 9 | Public booking webhook, zero auth, 10 nodes deep into business logic |
| NL→SQL assistant | 1 | 9 | Natural-language-to-SQL behind an unauthenticated webhook |
Pure Python stdlib. No supply-chain risk from the scanner itself. One pip install and you're scanning in 10 seconds.
Exit code 1 on critical/high findings. SARIF 2.1.0 output uploads straight to GitHub Code Scanning — findings appear on your PRs.
Every rule maps to the OWASP Agentic Top 10 (2026) so your compliance story starts on day one.
Reads local JSON exports. No telemetry, no uploads, no accounts. Your workflow data never leaves your machine.
Continuous monitoring for n8n + MCP servers: drift detection, alerting, multi-instance dashboard, self-hosted option. Early bird: $19/mo locked forever for the first 50 teams.