n8n Email Agent Prompt Injection: 60 Attacks, 0 Defenses That Worked

Testing 20 injection payloads against an n8n email triage workflow. Hardening the prompt made it worse. Moving logic to Code nodes stopped all 60.