Templates / Prevent phishing emails with GPT-4, VirusTotal, Slack, and Google Sheets

Prevent phishing emails with GPT-4, VirusTotal, Slack, and Google Sheets

Needs changes

by Oneclick AI Squad ✓ · 272 views · created 2025-11-07 · SecOps, AI Summarization

Needs changes. This template uses 1 thing(s) that n8n 3.0 removes: AI Agent v1 (old agent modes). 1 breaking item(s) found. Static check, last run 2026-10-19.

What to replace before upgrading

Removed in 3.0Replace with
AI Agent v1 (old agent modes)
GPT-4 Phishing Analysis (v1.6)
Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent.

Nodes used (11)

AI AgentOpenAI Chat ModelGoogle Sheets

What it does

This n8n workflow automates real-time phishing detection by ingesting incoming emails, extracting indicators, analyzing content with AI (GPT-4), calculating risk scores, and taking immediate action—quarantining malicious emails, flagging suspicious ones, alerting users and SOC, and logging everything for compliance and forensics. It prevents phishing attacks at the point of delivery with zero-touch automation. How it works 1. Webhook receives email 2. Extract URLs, domains, keywords 3. VirusTotal + GPT-4 analysis 4. Risk score routing 5. Quarantine / Flag / Allow 6. Slack SOC alert + audit log Risk Levels 🔴 HIGH (75–100) → Quarantine 🟡 MEDIUM (40–74) → Flag + warn 🟢 LOW (0–39) → Allow + log Credentials - OpenAI API (GPT-4o) - VirusTotal API - Slack Webhook - Google Sheets - SMTP Email Placeholders to Replace - YOUROPENAICREDENTIALID - YOURVIRUSTOTALAPIKEY - YOURSLACKWEBHOOKPATH - YOURGOOGLESHEETID - YOUREMAILGATEWAYTOKEN Explore More AI-Powered Email Security: Contact us to deploy zero-trust email gateways, automated BEC response, and insider threat detection using n8n + LLMs.

View the original on n8n.io → Check your own copy

Get the weekly “what broke” email

New templates, newly broken ones, and n8n release changes. One short email a week.

Form not loading? Subscribe here.