{"name": "Phishing Email Analyzer", "nodes": [{"id": "n1", "name": "Email Report Webhook", "type": "n8n-nodes-base.webhook", "typeVersion": 2.1, "position": [0, 0], "parameters": {"httpMethod": "POST", "path": "check-phishing", "responseMode": "responseNode"}}, {"id": "n2", "name": "Analyze for Phishing", "type": "n8n-nodes-base.httpRequest", "typeVersion": 4.4, "position": [224, 0], "parameters": {"method": "POST", "url": "https://api.anthropic.com/v1/messages", "sendHeaders": true, "headerParameters": {"parameters": [{"name": "x-api-key", "value": "YOUR_ANTHROPIC_API_KEY"}, {"name": "anthropic-version", "value": "2023-06-01"}, {"name": "content-type", "value": "application/json"}]}, "sendBody": true, "bodyParameters": {"parameters": [{"name": "model", "value": "claude-sonnet-4-6"}, {"name": "max_tokens", "value": "800"}, {"name": "messages", "value": "=[{\"role\":\"user\",\"content\":\"Return ONLY JSON {is_phishing:bool, confidence:1-10, red_flags:string[], safe_to_open:bool, recommended_action:string, report_to:string}. Email subject: {{ $json.body.subject }}. Sender: {{ $json.body.sender }}. Body: {{ $json.body.body?.substring(0,2000) }}. Links: {{ JSON.stringify($json.body.links) }}\"}]"}]}}}, {"id": "n3", "name": "Return Analysis", "type": "n8n-nodes-base.respondToWebhook", "typeVersion": 1.1, "position": [448, 0], "parameters": {"respondWith": "json", "responseBody": "={\"ok\":true,\"result\":\"{{ $json.content[0].text }}\"}"}}], "connections": {"Email Report Webhook": {"main": [[{"node": "Analyze for Phishing", "type": "main", "index": 0}]]}, "Analyze for Phishing": {"main": [[{"node": "Return Analysis", "type": "main", "index": 0}]]}}, "settings": {"executionOrder": "v1"}}