Automation library · AI assistants

Remediate critical attack paths with Neo4j and OpenAI

Started by a clock. It calls services over plain HTTP rather than through connectors. It hands the judgement calls to OpenAI. 18 steps, 1 branch, 1 loop or waits: a working afternoon to understand properly.

MediumCalls a model: OpenAI

Download free
18 stepsMedium: a working afternoon
1Branch: places the flow splits
1Loop or waits
0Services by connector: it calls them over plain HTTP

The flow

Starts it 2Model 2Logic 6Service 8

The steps in the order they run, from what starts it.

  1. 1When Daily Graph Scan StartsSchedule triggerStarts it
  2. 2When Test Run InitiatedManual triggerStarts it
  3. 3OpenAI GPT-4.1 Mini AgentLm Chat Open AiModel
  4. 4Set Configuration ParametersSetLogic
  5. 5Remediation Strategy AgentAgentModel
  6. 6Post to Security Graph APIHttp RequestService
  7. 7Parse AI and Build PayloadsCodeLogic
  8. 8Parse and Extract Attack PathsCodeLogic
  9. 9Submit Jira Issue APIHttp RequestService
  10. 10Wait for Data ProcessingWaitLogic
  11. 11Fetch GitHub Base Branch ReferenceHttp RequestService
  12. 12Analyze and Rank Attack PathsCodeLogic
  13. 13Create New GitHub BranchHttp RequestService
  14. 14If Critical Path DetectedIfLogic
  15. 15Update IaC File on BranchHttp RequestService
  16. 16Retrieve IaC File from GitHubHttp RequestService
  17. 17Propose Pull Request on GitHubHttp RequestService
  18. 18Post PR Link to JiraHttp RequestService

How it's built

Starts on
A clock
Steps
18, with 1 branch, 1 loop or waits
Size
Medium: a working afternoon
Connects to
Nothing by connector; it calls services over plain HTTP
Model
OpenAI

Questions

What does it need to run?

An n8n account, and a key for OpenAI. You connect your own accounts after importing it; none are included.

What starts it?

It starts on a clock.

Does it use AI?

Yes. It calls OpenAI. Model calls are billed by the provider, not by n8n.

How long does it take to set up?

Plan an afternoon. 18 steps is enough that you should read each one before running it.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 18 steps before you point it at anything that matters.