OpenAI Security Analysis
Configured with Agent, Aggregate, Form Trigger, Gmail, and additional nodes. Review the connections and setup before adapting this template.
Node categories in this workflow
- Trigger
- Web / API
- AI & models
- Transform
- Code
- Messaging
Icons describe general node roles, inferred from node types. Inspect the parameters for the configured action.
Drag to pan; use + and − to zoom. Reconstructed from the exported node positions; nothing runs here. Dashed lines represent non-main connections. Full node names and notes appear below.
How it works
The exported workflow contains the following configured nodes. Their connections are shown above; inspect the JSON for the complete logic, expressions, and external actions.
| Node | Category | Type | Operation |
|---|---|---|---|
| Landing Page Url | Trigger | Form Trigger | See node parameters |
| Scrape Website | Web / API | HTTP Request | See node parameters |
| OpenAI Headers Analysis | AI & models | OpenAI Chat Model | See node parameters |
| OpenAI Content Analysis | AI & models | OpenAI Chat Model | See node parameters |
| Security Vulnerabilities Audit | AI & models | Agent | See node parameters |
| Security Configuration Audit | AI & models | Agent | See node parameters |
| Merge Security Results | Transform | Merge | See node parameters |
| Aggregate Audit Results | Transform | Aggregate | See node parameters |
| Process Audit Results | Code | Code | See node parameters |
| Send Security Report | Messaging | Gmail | See node parameters |
| Extract Headers for Debug | Code | Code | See node parameters |
| convert to HTML | Code | Code | See node parameters |
Setup
- Download the JSON and import it into an isolated n8n instance. Leave the workflow inactive.
- Connect your own credentials through n8n’s credential store. Replace
REPLACE_WITH_*values with your resource identifiers. - Inspect API destinations, Code nodes, database queries, file paths, and outbound actions.
- Run with synthetic data and harmless destinations. Enable triggers only after checking the actual outputs.
Requirements
An n8n instance with the listed node types and compatible versions. Service-connected workflows may require accounts, credentials, or paid APIs.
Credential types declared in the source
gmailOAuth2openAiApi
Workflow notes
Quick Setup Guide
Quick Setup Guide
-
Add OpenAI API Credentials
- Go to Settings → Credentials → New → OpenAI API
- Enter your API key from platform.openai.com
-
Add Gmail Credentials
- Go to Settings → Credentials → New → Gmail OAuth2 API
- Complete the OAuth setup process
-
Update Email Configuration
- Open the 'Send Security Report' node
- Change the recipient email address from the default
-
Activate and Deploy Workflow
- Click 'Active' toggle in the top right
- Copy the form URL to share with others or use yourself
OpenAI Security Analysis
OpenAI Security Analysis
- Add your OpenAI credentials (required)
- Using GPT-4o models provides more detailed security analysis
- Analyzes for XSS, information disclosure, CSRF, and more
- Each agent scans different aspects of website security
- Consider upgrading to GPT-4o (not mini) for production use
Send Security Report
Send Security Report
- Connects securely to Gmail for sending detailed reports
- Report is sent as HTML formatted email
- Subject line includes the scanned URL
- Requires Gmail OAuth credentials to be set up
Security Audit Process
Security Audit Process
- This workflow performs two parallel security analyses
- Top path: Checks headers, cookies, and security configurations
- Bottom path: Analyzes HTML/JavaScript for client-side vulnerabilities
- Results are merged and formatted into a comprehensive report
- Analysis is non-invasive and only examines client-side content
How To Use This Workflow
How To Use This Workflow
- Deploy the workflow and activate it
- Access the form via the provided URL
- Enter any website URL to scan (must include http:// or https://)
- Submit the form to trigger the analysis
- Check your email for the detailed security report
- Share the results with your development team to implement fixes
Report Formatting
Report Formatting
- Creates beautiful, professional HTML email report
- Visual grade indicator (A-F) based on findings
- Includes count of critical issues and warnings
- Color-coded sections for easy readability
- Mobile-friendly responsive design
Results Processing
Results Processing
- Analyzes AI output to determine security grade
- Counts critical issues and warnings
- Extracts present security headers
- Prepares data for the email report template
- Generates timestamp for the report
OpenAI Security Analysis
OpenAI Security Analysis
Purpose and structure
This folder contains the OpenAI Security Analysis workflow. Its executable nodes use agent, aggregate, code, formTrigger, gmail, httpRequest, lmChatOpenAi, merge. The table and connection map below are derived from the JSON, not an inferred guarantee of behavior.
Setup
Import inactive. Configure your own credentials and replace REPLACE_WITH_* values. Review external destinations and Code nodes before running.
Entry points
Landing Page Url
Verification
Sanitized source candidate; not runtime-tested. This overview is generated from node metadata. Read the folder README for the connection map, credential types, and license.
Attribution
https://github.com/Zie619/n8n-workflows/blob/94007c1445d9258a7da116646b79473e7c7c3282/workflows/Code/0808_Code_Form_Send_Webhook.json MIT; preserve source notices.