The dangerous part is not that a system can generate an n8n workflow as JSON.
The dangerous part is that the JSON can execute.
Once an AI assistant, internal agent, or automation pipeline can create, modify, import, or activate n8n workflows, you no longer have a simple productivity feature. You have a code-generation system connected to triggers, credentials, HTTP endpoints, databases, SaaS tools, and internal business logic.
That is a powerful capability. It is also a very good way to build a production incident if the guardrails are missing.
The phrase “n8n can build its own workflows” can mean several things in practice:
