Automation library · Chat assistants

Audit vendor security risk with OpenAI and Google Sheets

Started by a clock, and works across Gmail, Google Sheets and Slack. It hands the judgement calls to OpenAI. 17 steps, 1 branch: a working afternoon to understand properly.

MediumCalls a model: OpenAI

Download free
17 stepsMedium: a working afternoon
1Branch: places the flow splits
0Loops or waits
3Services it connects to

The flow

Starts it 2Model 3Logic 4Service 8

The steps in the order they run, from what starts it.

  1. 1OpenAI Chat ModelLm Chat Open AiModel
  2. 2Structured Output ParserOutput Parser StructuredModel
  3. 3Schedule TriggerSchedule triggerStarts it
  4. 4On Workflow ErrorError triggerStarts it
  5. 5Vendor Risk Analysis AgentAgentModel
  6. 6Set - Vendor DataSetLogic
  7. 7Slack – Post Workflow Error AlertSlackService
  8. 8Parse Agent OutputCodeLogic
  9. 9Slack – Post Agent Error AlertSlackService
  10. 10Fetch Website HeadersHttp RequestService
  11. 11Check Domain Age (RDAP)Http RequestService
  12. 12Check Breach History (HIBP)Http RequestService
  13. 13Update Vendor Risk RegisterGoogle SheetsService
  14. 14Compile FindingsCodeLogic
  15. 15Is High Risk?IfLogic
  16. 16Alert Security Team - SlackSlackService
  17. 17Send Summary EmailGmailService

How it's built

Starts on
A clock
Steps
17, with 1 branch
Size
Medium: a working afternoon
Connects to
Gmail, Google Sheets, Slack
Model
OpenAI

Questions

What does it need to run?

An n8n account, plus your own Gmail, Google Sheets and Slack accounts, and a key for OpenAI. You connect your own accounts after importing it; none are included.

What starts it?

It starts on a clock.

Does it use AI?

Yes. It calls OpenAI. Model calls are billed by the provider, not by n8n.

How long does it take to set up?

Plan an afternoon. 17 steps is enough that you should read each one before running it.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 17 steps before you point it at anything that matters.