HackerOne Report Analysis and Technical Insight Extractor using Google Gemini - n8n Workflow

Professional bug bounty hunters and penetration testers needing rapid, high-quality analysis.
Security engineers looking to quickly summarize complex vulnerability disclosures.

• n8n users seeking advanced n8n templates demonstrating LLM agent orchestration and tool usage.

This specialized n8n workflow provides a rapid, high-impact method for consuming raw HackerOne report data. Instead of manually sifting through lengthy technical write-ups, this automation leverages the power of the Google Gemini AI Chat Model, coupled with a defined agent, to distill the content down to actionable payloads, techniques, and root cause analysis. It starts with a conversational n8n trigger (a chat interface) and ends with a structured, concise security report formatted specifically for advanced hunters. Utilizing this pre-built n8n workflow drastically accelerates security research and triage efforts, allowing technical teams to focus on exploitation rather than summarization. This n8n node configuration ensures reliable data retrieval and expert-level analysis.

The execution of this n8n workflow follows a tight, agent-driven sequence:

1. Trigger Initialization: The n8n workflow starts when a user inputs a HackerOne report URL (ending in .json) into the custom When chat message received n8n trigger interface.


2. Agent Orchestration: The H1 report summarizer n8n agent node receives the URL input. This n8n node is configured with a strict system prompt tailored for extracting 'unique, high-impact technical insights.'


3. Tool Execution (Data Retrieval): The AI agent determines it must retrieve the report content. It automatically calls the internal GET H1 report n8n node (an HTTP Request Tool), passing the received URL to fetch the complete, raw JSON data from the HackerOne API.


4. LLM Processing: The agent utilizes the sophisticated Google Gemini Chat Model n8n node (running gemini-2.5-pro) to analyze the dense JSON data structure.


5. Structured Output: Based on the strict formatting instructions in the agent's prompt, the n8n workflow generates a detailed security brief, including a summary, specific techniques, context, raw payloads, and potential 'Pro Tips,' delivering the result back through the chat interface.

1. Import: Copy the provided n8n workflow JSON and import it into your n8n instance.


2. Credentials Setup:

1. Activate Trigger: The When chat message received n8n trigger is configured as a public webhook. Activate the n8n workflow to generate the public URL for the chat interface.


2. Testing: Send a test URL (e.g., https://hackerone.com/reports/123456.json) to the resulting chat interface to ensure the n8n agent node correctly calls the HTTP tool and performs the analysis.

• When chat message received (n8n trigger): The initial entry point for the n8n workflow, exposing a public chat interface to receive the H1 report URL input from the user. It is styled with custom CSS for a focused, technical aesthetic.


• H1 report summarizer (n8n agent node): The central piece of logic in this n8n workflow. It is an agent configured to use tool-calling functionality. Its system prompt dictates a concise, technical output format focused strictly on actionable security data and orchestrates the call to the data-fetching n8n node.


• Google Gemini Chat Model (n8n node): This n8n node provides the large language model capacity (models/gemini-2.5-pro) required by the agent to analyze the voluminous JSON payload and structure the technical insights according to the prompt.


• GET H1 report (n8n node - HTTP Request Tool): This dedicated n8n node is configured as a callable tool for the AI agent. It executes a GET request to retrieve the report JSON data dynamically using the URL provided by the initial n8n trigger.