Scan single URLs for security vulnerabilities with GPT-4 (JS, PHP, Python)
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
Nodes used (10)
- n8n Form Trigger
n8n-nodes-base.formTrigger - AI Agent
@n8n/n8n-nodes-langchain.agent - OpenAI Chat Model
@n8n/n8n-nodes-langchain.lmChatOpenAi - Http Request Tool
n8n-nodes-base.httpRequestTool - Code
n8n-nodes-base.code - Split Out
n8n-nodes-base.splitOut - Filter
n8n-nodes-base.filter - HTML
n8n-nodes-base.html - Switch
n8n-nodes-base.switch - Google Drive
n8n-nodes-base.googleDrive
What it does
Overview This workflow automates static security analysis for JavaScript, PHP, and Python codebases. It’s designed for bug bounty hunters and security researchers who need fast, structured, and AI-assisted vulnerability detection across multiple sources. --- Features - 🤖 AI-Powered Analysis: - Specialized agents for each language: - AI JavaScript Expert - AI PHP Expert - AI Python Expert - Each agent detects only exploitable vulnerabilities (AST + regex heuristics). - Returns strict JSON with: json { "results": { "url": "file or URL", "code": "lines + snippet", "severity": "medium|high|critical", "vuln": "vulnerability type" } } - 🧩 Post-Processing: - Cleans, formats, and validates JSON results. - Generates HTML tables with clear styling for quick visualization. --- Output - ✅ JSON vulnerability reports per file. - 📊 HTML table summaries grouped by language and severity. --- Usage 1. Import the workflow into n8n. 2. Configure credentials: - OpenAI API key - GitHub API Key - Google Drive API Key 3. Run via the provided webhook form. 4. Select analysis mode and input target. 5. View structured vulnerability reports directly in n8n or Google Drive. --- Notes - Performs static analysis only (no code execution). - Detects exploitable findings only; ignores low-impact issues. ---