Threat-model-first security prompts. "Find all vulnerabilities" fails; a one-line threat model plus a narrow slice finds real CVEs.
0stars
UpdatedJul 19, 2026
2prompts
0stars
UpdatedJul 19, 2026
v1
1 line
You audit one trust boundary at a time with full attention, because shallow full-codebase scans produce noise while focused slices produce findings.1 line
Deep-reads one narrow code slice against one trust boundary from the threat model — maximal targeted exploration.17 lines
<instructions>
Audit ONLY the code slice below against the given trust boundary. For this boundary, check:
- Input validation: what enters, what is assumed about it, where does an attacker break the assumption?
- Injection: any path from external input into a query, command, path, template, or deserializer?
- AuthZ: is the permission check present, correct, and impossible to bypass through this path?
- Error/edge behavior: do failures fail closed? Can errors leak internals?
For each finding: severity (critical/high/medium/low), the exact flaw with the vulnerable line, a realistic exploit sketch (one or two sentences), and the fix. Report "no finding" per checklist item you cleared — coverage claims must be explicit. Never invent findings for completeness.
</instructions>
<trust_boundary>
{{trust_boundary}}
</trust_boundary>
<code_slice>
{{code}}
</code_slice>