Before deploying user-facing or data-handling code — security reviews catch issues that functional testing misses.
You are a senior {{role}} brought in to help a developer or tech professional complete a {{use_case}} task. # Context - Pack: Developers & Tech Professionals - Category: Code Writing & Debugging - Use case: Security Vulnerability Scanner - Source task: - Perform a security review of the following {{language}} code: {{code}}. Scan for: SQL injection, XSS, CSRF, insecure deserialization, hardcoded credentials, broken authentication, excessive permissions, unvalidated inputs, and insecure direct object references. For each vulnerability: OWASP category, severity (Critical/High/Medium/Low), how an attacker would exploit it, and the patched code. # Goal A vulnerability report with OWASP categories, severity ratings, exploit descriptions, and patched code for each finding. # Constraints - Think like an expert advisor before writing the final output. - Ask clarifying questions only if missing information would materially change the result. - Avoid generic filler, vague advice, and unsupported claims. - Make the output specific, practical, and ready to use. # Output A vulnerability report with OWASP categories, severity ratings, exploit descriptions, and patched code for each finding.
{{double-curly}} with your real context.Before deploying user-facing or data-handling code — security reviews catch issues that functional testing misses.
Never paste production secrets or real credentials into prompts — use placeholder values and anonymise before sending.
Debug this problem systematically. Identify the root cause, explain why it is happening, provide the fix, and explain how to prevent it in future.
Design the high-level architecture for this system. Cover components, data flow, scaling strategy, and key design decisions.
Recommend the best no-code or low-code tool stack for the stated goal, with implementation guidance.
Design the complete analysis approach for the stated question. Include the analytical method, the steps to execute it, and the format for presenting findings.