Real Image Manifest Validator

Match one or two supplied image files to their manifest: byte count, JPEG/PNG signature, MIME type and SHA-256 integrity.

MIT-licensed code · Manual trigger · No credentials. Tested on n8n 2.39.6. The sample has no image bytes and stops until configured.

Offline checks

Inspect the bytes you supply

01

Strict file boundaries

One or two JPEG/PNG assets, up to 2 MiB each, with exact local path names. Extra files, duplicates and traversal paths are rejected.

02

Manifest consistency

Both supplied hashes and the declared size must match decoded bytes. Alt text, a credit and a permission note are required.

03

Review the actual image

A signature is not a full decode. Hashes do not prove ownership, permission, safety or relevance. Publication remains a separate human decision.

Before you run

Supply reviewed bytes in your private workspace

  1. Import into a new, inactive n8n workflow and read the setup guide
  2. Provide canonical base64 and matching metadata for your reviewed file
  3. Run a valid case, remove the permission note to confirm rejection, then restore and rerun

No image fetch, model call, credential or automatic publication is included. Final output omits image bytes, but input remains visible in the n8n editor: check execution retention before using private files.

View the source manifest workflow →