The flow
Starts it 1Logic 9Service 5
The steps in the order they run, from what starts it.
- 1Schedule TriggerSchedule triggerStarts it
- 2Generate a security auditN8nService
- 3Get all workflowsN8nService
- 4Check 1: hardcoded secretsCodeLogic
- 5Check 2: unauthenticated webhooksCodeLogic
- 6Check 3: insecure HTTP URLsCodeLogic
- 7Check 4: missing error workflowsCodeLogic
- 8Check 5: pinned dataCodeLogic
- 9Score the auditCodeLogic
- 10Get previous snapshotData TableService
- 11Diff vs last snapshotCodeLogic
- 12Save snapshotData TableService
- 13Prepare report fieldsCodeLogic
- 14Compose messageSetLogic
- 15Send report to TelegramTelegramService
How it's built
- Starts on
- A clock
- Steps
- 15
- Size
- Medium: a working afternoon
- Connects to
- Telegram, n8n data table
- Model
- None. This is plumbing, not judgement
Questions
What does it need to run?
An n8n account, plus your own Telegram account. You connect your own accounts after importing it; none are included.
What starts it?
It starts on a clock.
Does it use AI?
No. Every step is fixed logic or a call to a service, so it does the same thing every time.
How long does it take to set up?
Plan an afternoon. 15 steps is enough that you should read each one before running it.
How do I import it?
Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.
Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 15 steps before you point it at anything that matters.