Automation library · Chat assistants

Detect and triage risky OAuth apps with Claude and Slack

Started by a clock, and works across Slack. It hands the judgement calls to Claude. 20 steps, 2 branches, 1 loop or waits: a working afternoon to understand properly.

MediumCalls a model: Claude

Download free
20 stepsMedium: a working afternoon
2Branches: places the flow splits
1Loop or waits
1Service it connects to

The flow

Starts it 1Model 2Logic 10Service 7

The steps in the order they run, from what starts it.

  1. 1Cron - OAuth Scan TriggerSchedule triggerStarts it
  2. 2Anthropic - Risk Scoring ModelLm Chat AnthropicModel
  3. 3HTTP - Fetch Authorized OAuth AppsHttp RequestService
  4. 4HTTP - Fetch Baseline WhitelistHttp RequestService
  5. 5Claude - OAuth Risk ScoringAgentModel
  6. 6Merge - Combine Apps & BaselineMergeLogic
  7. 7JS - Parse Risk ScoresCodeLogic
  8. 8JS - Diff Against BaselineCodeLogic
  9. 9Switch - Route by Risk TierSwitchLogic
  10. 10IF - New or Changed Grants Found?IfLogic
  11. 11HTTP - Auto-Revoke OAuth GrantHttp RequestService
  12. 12Slack - Alert (Manual Review Required)SlackService
  13. 13JS - Log & Approve SilentlyCodeLogic
  14. 14HTTP - Enrich App ReputationHttp RequestService
  15. 15No Action - End CycleNo OpLogic
  16. 16Slack - Critical Alert (App Revoked)SlackService
  17. 17Merge - All BranchesMergeLogic
  18. 18JS - Attach Reputation to Flagged AppsCodeLogic
  19. 19HTTP - Update Baseline StoreHttp RequestService
  20. 20Wait For Model BufferWaitLogic

How it's built

Starts on
A clock
Steps
20, with 2 branches, 1 loop or waits
Size
Medium: a working afternoon
Connects to
Slack
Model
Claude

Questions

What does it need to run?

An n8n account, plus your own Slack account, and a key for Claude. You connect your own accounts after importing it; none are included.

What starts it?

It starts on a clock.

Does it use AI?

Yes. It calls Claude. Model calls are billed by the provider, not by n8n.

How long does it take to set up?

Plan an afternoon. 20 steps is enough that you should read each one before running it.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 20 steps before you point it at anything that matters.