Zentra Workflow Security Auditor is an offline n8n workflow-export analyser. It reviews a buyer-supplied n8n workflow export for public webhooks, secret patterns, risky calls, and weak failure handling. The ZIP includes an n8n workflow, configuration template, JSON schemas, implementation guide, sample event, smoke-test, buyer documentation, and a local Node.js 20+ CLI. It makes no network calls and includes no credentials or hosted service. Its checks are heuristic, not a penetration test; it does not execute workflows, validate credentials, contact third parties, or guarantee security outcomes. Human review is required.