kipn.ai
Shared workflow report

Gmail Email Categorizer

Analyzed

Executive Summary
Learn more
n8n
Production RiskHigh

Fragile expression — likely to fail when production data shape differs from test data — These expressions work reliably against test data where all fields are present. In production, fields may be absent, null, or differently typed — causing a runtime error or silent null propagation at the point of the expression.

Cost ExposureHigh

AI node has no output token cap — Without a cap, models occasionally produce very long outputs — particularly when given an ambiguous or open-ended prompt. This increases cost unpredictably and can cause downstream parsing to fail if the consumer expects a bounded response.

Observability Gap

Side-effect node has no audit trail — If this action is disputed, replayed, or causes a data inconsistency, there is no structured record of what was sent, when, and with what data. Debugging requires cross-referencing n8n execution history with the external system's own logs.

69/ 100
Overall
Risk: HighCost: High
Reliability
37
Security
100
Cost Risk
69
Observability
84
AI Governance
100
Naming
100
Complexity
100
Nodes
8
Edges
6
External calls
6
LLM nodes
3
AI via HTTP
0
Loops
0
Error handlers
0
Unreachable
0
Max depth
4
Workflow Graph
Graph
8 nodes · 6 edges
100%
click a node to highlight its upstream & downstream paths
Controls Matrix
Learn more
Present Partial Missing
CheckDescriptionStatus
Failure Alerting

Failures silent — only visible in execution log

Missing
Retry on Failure

Transient failures cause permanent stops

Present
Request Timeouts

Slow providers can block execution indefinitely

Missing
Duplicate Prevention

Retry on write events creates duplicate records

Missing
Empty Response Handling

Zero-result lookups break downstream logic

Present
AI Output Limits

Output cost and parsing risk unbounded

1 of 3 AI nodes missing token cap

Partial
AI Output Format

Free-form output will break downstream parsers

Present
Activity Logging

Side effects unlogged

Missing
Write Deduplication

Webhook replays may create duplicate records

Present

Run this analysis on your own workflows

Break Points
Learn more
1Fragile expressionRisk HighConfidence 85%1 node affected
Affected Nodes:
  • Add label to message
What happens:

These expressions work reliably against test data where all fields are present. In production, fields may be absent, null, or differently typed — causing a runtime error or silent null propagation at the point of the expression.

Recommended Fix:
  • In `messageId`, change {{ $('Gmail Trigger').item.json.id }} to {{ $('Gmail Trigger')?.item?.json?.id }}.
  • In `labelIds`, change {{ $json.labelId }} to {{ $json?.labelId }}.

2Fragile expressionRisk MediumConfidence 90%1 node affected
Affected Nodes:
  • AI Agent
What happens:

These expressions work reliably against test data where all fields are present. In production, fields may be absent, null, or differently typed — causing a runtime error or silent null propagation at the point of the expression.

Recommended Fix:
  • In `text`, change {{ $('Gmail Trigger').item.json.subject }} to {{ $('Gmail Trigger')?.item?.json?.subject }}.
  • In `text`, change {{ $('Gmail Trigger').item.json.from.value[0].address }} to {{ $('Gmail Trigger').item.json.from.value?.[0].address }}.

3Missing timeoutRisk MediumConfidence 90%5 nodes affected
Affected Nodes:
  • AI Agent
  • OpenAI Chat Model
  • OpenAI Chat Model1
What happens:

A single slow external call can block the entire workflow execution. At high trigger frequency, accumulated stuck executions can exhaust the n8n execution queue.

Recommended Fix:

Set a timeout under the node's Additional Options. A value of 10,000–30,000 ms (10–30 seconds) is a reasonable starting point for most APIs; adjust based on the provider's documented SLA.


4Missing error handlerRisk MediumConfidence 85%7 nodes affected
Affected Nodes:
  • AI Agent
  • OpenAI Chat Model
  • Structured Output Parser
What happens:

Operators cannot tell from external signals that a run failed. Silent failures go undetected until a downstream system shows missing data or a user reports a problem.

Recommended Fix:

Connect a dedicated Error Workflow in workflow settings, or add a per-node onError: "continueErrorOutput" path that sends an alert via Slack, email, or a logging service.


5No AI token capRisk MediumConfidence 85%1 node affected
Affected Nodes:
  • AI Agent
What happens:

Without a cap, models occasionally produce very long outputs — particularly when given an ambiguous or open-ended prompt. This increases cost unpredictably and can cause downstream parsing to fail if the consumer expects a bounded response.

Recommended Fix:

Set maxTokens to a value appropriate for the task. Classification tasks rarely need more than 100 tokens; structured JSON output typically needs 200–500; long-form summaries may need 1,000–2,000. Start conservative and increase if needed.


6Missing audit logRisk MediumConfidence 70%2 nodes affected
Affected Nodes:
  • Add label to message
  • Get many labels
What happens:

If this action is disputed, replayed, or causes a data inconsistency, there is no structured record of what was sent, when, and with what data. Debugging requires cross-referencing n8n execution history with the external system's own logs.

Recommended Fix:

After the write node, add a step that records the key fields of the action to a log — a Google Sheet row append, a database insert to an audit table, or a Slack message to a dedicated ops channel. Include: timestamp, action type, affected ID, and result.


7Agent without iteration limitRisk LowConfidence 85%1 node affected
Affected Nodes:
  • AI Agent
What happens:

In production, agents can enter loops — repeatedly calling a tool that returns ambiguous results. Without an iteration cap, a single execution can generate hundreds of tool calls, causing unpredictable cost spikes and potentially triggering rate limits on connected APIs.

Recommended Fix:

Set maxIterations to 10–20 for most agentic tasks. Monitor actual iteration counts in execution history and adjust up if legitimate tasks are being cut short.


8Large AI prompt payloadRisk LowConfidence 80%1 node affected
Affected Nodes:
  • AI Agent
What happens:

Token costs scale with the size of the payload. A full $json object or a field containing HTML, transcripts, or email bodies can be orders of magnitude larger than the task actually requires.

Recommended Fix:

Select only the fields the model needs for its task. If the content must be large (e.g., summarizing a full document), set a maxTokens output cap and consider chunking the input across multiple calls.

Cost Hotspots
Learn more

Currently covers AI/LLM nodes. Non-AI API costs will be added in a future update.

1Multiple cost risksHigh exposure40 pts1 node affected
Affected Nodes:
  • AI Agent
Cost risks:
  • Full payload in promptunbounded input tokens
  • No output capunbounded output tokens
  • Agent iteration riskno max iterations set
Recommended Fix:

Set maxTokens to a value appropriate for the task. Classification tasks rarely need more than 100 tokens; structured JSON output typically needs 200–500; long-form summaries may need 1,000–2,000. Start conservative and increase if needed.

Raw Findings (12)
#Issue titleIssue descriptionAffected nodes
1Cost RiskAI node has no output token cap

Node "AI Agent" has no maxTokens or equivalent parameter set. Output length is controlled solely by the model.

AI AgentHigh85%
2ReliabilityExternal call with no timeout configured

Node "AI Agent" makes an external call with no timeout parameter set. The n8n execution will wait indefinitely if the provider is slow or unresponsive.

AI Agent, OpenAI Chat Model, OpenAI Chat Model1, Add label to message, Get many labelsHigh90%
3ReliabilityFragile expression — likely to fail when production data shape differs from test data

Node "AI Agent" contains expression(s) with risky patterns that assume fields are always present.

AI AgentHigh90%
4ReliabilityFragile expression — likely to fail when production data shape differs from test data

Node "Add label to message" contains expression(s) with risky patterns that assume fields are always present.

Add label to messageHigh85%
5ReliabilityNo error handler or failure notification path

Workflow has 7 high-risk nodes (external calls or writes) with no configured error workflow and no inline notification path. If a production execution fails, the failure only appears in execution history.

AI Agent, OpenAI Chat Model, Structured Output Parser, OpenAI Chat Model1, Add label to message, Code in JavaScript, Get many labelsHigh85%
6Cost RiskAI agent has no iteration limit

Agent node "AI Agent" has no maxIterations or equivalent parameter. The agent will continue calling tools until it decides to stop or hits a platform-level limit.

AI AgentMedium85%
7Cost RiskFull or large payload detected in AI prompt

Node "AI Agent" receives text: large-payload keyword 'body' in its prompt parameter. This sends an unbounded amount of data to the model.

AI AgentMedium80%
8ObservabilitySide-effect node has no audit trail

Node "Add label to message" performs a write node: "add label to message" (sideeffect: external_write) operation with no logging or audit trail detected downstream.

Add label to messageMedium70%
9ObservabilitySide-effect node has no audit trail

Node "Get many labels" performs a write node: "get many labels" (sideeffect: external_write) operation with no logging or audit trail detected downstream.

Get many labelsMedium70%
10ReliabilityFinding: external without retry

Node "AI Agent" (@n8n/n8n-nodes-langchain.agent) is a read-only external call with no retry configured.. sideEffect: read_only, role: ai_agent. Read-only calls are typically safe to retry; enabling retryOnFail improves resilience to transient failures.

AI AgentInfo70%
11ReliabilityFinding: external without retry

Node "OpenAI Chat Model" (@n8n/n8n-nodes-langchain.lmChatOpenAi) is a read-only external call with no retry configured.. sideEffect: read_only, role: ai_model_call. Read-only calls are typically safe to retry; enabling retryOnFail improves resilience to transient failures.

OpenAI Chat ModelInfo70%
12ReliabilityFinding: external without retry

Node "OpenAI Chat Model1" (@n8n/n8n-nodes-langchain.lmChatOpenAi) is a read-only external call with no retry configured.. sideEffect: read_only, role: ai_model_call. Read-only calls are typically safe to retry; enabling retryOnFail improves resilience to transient failures.

OpenAI Chat Model1Info70%

Catch workflow risks before they catch you