Security Code Audit
Prompts
-
Secure Code Review for Web Handlers
Review code for common vulnerability classes.
-
Secrets and Configuration Leak Check
Look for exposed secrets and risky configuration.
-
API Security Assessment
Evaluate API design for authorization and abuse risks.
-
Threat Model for a New Feature
Create a lightweight STRIDE threat model.
-
Session Management and CSRF Protection Review
Verify state-changing requests and sessions are safe.
-
Cryptography Usage Review
Check that crypto is used correctly and not reinvented.
-
Third-Party Integration Security Review (Webhooks and OAuth)
Check the trust boundary with external services.
-
Authentication Code Review: Passwords and Tokens
Review login, hashing, and token code.
-
Infrastructure as Code Security Review
Review cloud configuration files for risk.
-
Mobile App Security Review Checklist
Review a mobile app's storage, network, and permissions.
-
Security Code Review of File Upload and Processing
Review risks around user-supplied files.
-
Logging, Privacy and Data Retention Code Review
Find personal data leaks in logs and storage.
-
Container and Deployment Image Security Review
Assess Docker images and runtime settings.
-
Business Logic and Abuse Case Review
Find flaws that scanners miss.
No prompts match those filters.