n8n Agency Change-Control Skills

What it does

A plain git diff of two exports is hundreds of lines of moved nodes, reordered arrays and new version ids. This pack turns two exports into a client-safe change report: every behavior-relevant change classified, cosmetic noise listed separately, a targeted acceptance checklist, and a sign-off record bound to the exact workflow versions.

What it catches (each is a labeled fixture)

• Nodes moved, arrays reordered, versionId/meta changed, sticky note edited: cosmetic only (100+ raw JSON lines, 0 changes)
• Node renamed and every $('Old') updated: cosmetic only
• Node renamed but an expression still says $('Old'): broken reference (high)
• Slack channel, email recipients, Sheet, Gmail op changed to delete, new POST node: destination (high)
• Credential swapped: credential (high)
• Webhook path, schedule or Gmail search filter changed: trigger (high)
• Code node edited: manual review required; sign-off refuses without explicit acceptance
• IF threshold, swapped branches, disabled node: logic / wiring

Client-safe by default

Client reports redact tokens (sk-, Bearer, api_key=, GitHub/Slack/AWS keys, JWTs, long hex), query strings, email local parts and credential names, and leave out code diffs. An --internal flag shows everything, for you.

Sign-off that means something

signoff records the approver, time, checklist and SHA-256 of both workflows' behavior-relevant JSON, plus a hash of the record itself. verify fails if the workflow was edited after approval or the record was altered. It's a tamper-evident record, not a legal e-signature. The pack includes an example client report (docs/EXAMPLE-CLIENT-REPORT.md).

Honest limits

• It reads JSON; it doesn't run workflows. Code nodes are never declared safe: a person reads them.
• Node categories come from node type and parameter names. Community nodes default to logic (medium), not ignored.
• It never deploys, edits or repairs workflows.

Requirements

Python 3.9+, standard library only, works offline. No n8n access or API key needed: export workflows from n8n first. 17 tests (23 labeled scenarios); all 26 fixture files import into n8n 2.46.6.

Format and license

Zip, 58 KB, v1.0. Use in your own and client projects (one buyer: a person, or one company and its employees); no resale or giving the files away. Full terms in LICENSE.md.

FAQ

Does it need n8n access or an API key?

No. It reads exported JSON offline (Python 3.9+, no dependencies).

Can it say a Code node change is safe?

No. Code changes always need a person, and sign-off refuses without explicit acceptance.

Community nodes?

Classified as logic (medium) and never ignored.

Is the sign-off a legal signature?

No. It is a tamper-evident record of who approved which version.

How do I get the files?

Right after payment, Stripe’s confirmation page shows your download link.

Refunds?

Email hello@youraitools.co within 14 days if it doesn’t work and we can’t fix it.

Can I pay with crypto?

Yes. Pay the same price in USDC or USDT on Base, Ethereum, Arbitrum, Optimism, Polygon or Solana from the "Pay with crypto" button, with no account or KYC. We check the payment on-chain and show your download links as soon as it confirms.

Pairs well with

Related

• n8n Agent Workflows
• n8n Bookkeeper Invoice Exceptions Pack
• All n8n workflows
• All marketplace products