I audited my Lead Qualification workflow — 8 critical issues I never noticed

Built with n8n
, , ,
1

I’ve been running a Lead Qualification & CRM Sync workflow in production for months. Typeform → qualify → HubSpot → Gmail → Slack. Thought it was solid.

Then I ran an AI audit on it. Found 8 issues I’d completely missed:

  • No webhook authentication — anyone with the URL can inject fake leads

  • Gmail has a 500/day sending limit — workflow silently fails at scale

  • No duplicate check before HubSpot upsert — same contact created multiple times

  • Zero error handling — one API timeout kills the entire flow with no notification

  • No idempotency — duplicate Typeform submissions create duplicate contacts

  • Slack node has no fallback if channel doesn’t exist

  • No logging — impossible to audit which leads were processed

  • Quality score: 3/10 for production use

The audit also generated a full improvement plan with architecture diagram.

Built a tool that does this automatically for any n8n or Make workflow — paste your JSON, get a full audit report in MD, PDF and DOCX in about 60 seconds.

Happy to share the tool link if anyone’s interested — or drop your workflow JSON here and I’ll run it for you.

1 Like
4

8/10 is pretty brutal but also real for most self-hosted setups. the webhook auth oversight gets everyone — we usually bolt that on after the fact too. nice that you turned this into an audit tool, that could save teams weeks of debugging in production.

5

is this possible with LLMs that exist atm like Claude?

6

Absolutely — any of the major LLMs (Claude, GPT-4, Gemini) can do workflow analysis. Claude’s pretty solid for this actually since it handles long JSON well and gives structured feedback. The key is how you’re prompting it — audit prompts need to be specific about what you’re checking for (security, performance, error handling). Makes a huge difference in output quality.

1 Like
7

Definitely, going to try an audit prompt, great strategy to use