The flow
Starts it 1Model 3Logic 5Service 8
The steps in the order they run, from what starts it.
- 1When URL SubmittedForm triggerStarts it
- 2Google Gemini ModelLm Chat Google GeminiModel
- 3Parse Structured OutputOutput Parser StructuredModel
- 4Prepare URL DataSetLogic
- 5Threat Data AnalyzerChain LlmModel
- 6Post to Safe Browsing APIHttp RequestService
- 7Build Final Report DataSetLogic
- 8Fetch IP and Location InfoHttp RequestService
- 9Log Results in SheetsGoogle SheetsService
- 10Retrieve Domain AgeHttp RequestService
- 11Post Alert to SlackSlackService
- 12Get SSL Certificate HistoryHttp RequestService
- 13Combine crt.sh ResultsCodeLogic
- 14Submit URL to VirusTotalHttp RequestService
- 15Wait 1 Second for AnalysisWaitLogic
- 16Get VirusTotal ReportHttp RequestService
- 17Aggregate Risk ScoresCodeLogic
How it's built
- Starts on
- Someone submitting a form
- Steps
- 17, 1 loop or waits
- Size
- Medium: a working afternoon
- Connects to
- Google Sheets, Slack
- Model
- Gemini
Questions
What does it need to run?
An n8n account, plus your own Google Sheets and Slack accounts, and a key for Gemini. You connect your own accounts after importing it; none are included.
What starts it?
It starts on someone submitting a form.
Does it use AI?
Yes. It calls Gemini. Model calls are billed by the provider, not by n8n.
How long does it take to set up?
Plan an afternoon. 17 steps is enough that you should read each one before running it.
How do I import it?
Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.
Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 17 steps before you point it at anything that matters.