https://security-recipes.ai/prompt-library/general/Recent content in General on security-recipes.aien-ushttps://security-recipes.ai/prompt-library/general/compliance-standards/soc2-change-management-evidence-check/https://security-recipes.ai/prompt-library/general/compliance-standards/soc2-change-management-evidence-check/Thu, 25 Jun 2026 00:00:00 GMTRead-only recipe for mapping repository changes, reviews, and agent runs to SOC 2 change-management evidence.https://security-recipes.ai/prompt-library/general/compliance-standards/iso27001-secure-development-evidence-check/https://security-recipes.ai/prompt-library/general/compliance-standards/iso27001-secure-development-evidence-check/Thu, 25 Jun 2026 00:00:00 GMTRead-only recipe for collecting ISO 27001 secure-development, configuration, supplier, and access-control evidence from a repository.https://security-recipes.ai/prompt-library/general/compliance-standards/pci-dss-cde-agent-boundary-check/https://security-recipes.ai/prompt-library/general/compliance-standards/pci-dss-cde-agent-boundary-check/Thu, 25 Jun 2026 00:00:00 GMTRead-only recipe for checking whether agents, CI, logs, and repositories cross cardholder-data environment boundaries.https://security-recipes.ai/prompt-library/general/compliance-standards/nist-ssdf-repo-evidence-check/https://security-recipes.ai/prompt-library/general/compliance-standards/nist-ssdf-repo-evidence-check/Thu, 25 Jun 2026 00:00:00 GMTRead-only recipe for mapping repository evidence to NIST SSDF practices and producing a secure-development gap report.https://security-recipes.ai/prompt-library/general/compliance-standards/cis-controls-safeguard-implementation-check/https://security-recipes.ai/prompt-library/general/compliance-standards/cis-controls-safeguard-implementation-check/Thu, 25 Jun 2026 00:00:00 GMTRead-only recipe for checking repository and workflow evidence against CIS Controls safeguard themes.https://security-recipes.ai/prompt-library/general/compliance-standards/slsa-provenance-evidence-check/https://security-recipes.ai/prompt-library/general/compliance-standards/slsa-provenance-evidence-check/Thu, 25 Jun 2026 00:00:00 GMTRead-only recipe for checking build provenance, artifact integrity, and supply-chain evidence against SLSA expectations.https://security-recipes.ai/prompt-library/general/compliance-standards/ai-governance-oversight-evidence-check/https://security-recipes.ai/prompt-library/general/compliance-standards/ai-governance-oversight-evidence-check/Thu, 25 Jun 2026 00:00:00 GMTRead-only recipe for collecting human oversight, model-provider, logging, and risk-classification evidence for AI-enabled workflows.https://security-recipes.ai/prompt-library/general/crypto-defi/defi-reentrancy-and-callback-hardening/https://security-recipes.ai/prompt-library/general/crypto-defi/defi-reentrancy-and-callback-hardening/Sun, 14 Jun 2026 00:00:00 GMTUse this prompt to harden DeFi contracts that make external calls, transfer tokens, or rely on callback-capable standards.https://security-recipes.ai/prompt-library/general/crypto-defi/defi-admin-key-and-role-blast-radius-review/https://security-recipes.ai/prompt-library/general/crypto-defi/defi-admin-key-and-role-blast-radius-review/Sun, 14 Jun 2026 00:00:00 GMTUse this prompt to reduce the damage a compromised admin key, overbroad role, or rushed governance action can cause in a DeFi protocol.https://security-recipes.ai/prompt-library/general/crypto-defi/erc4626-vault-inflation-and-rounding-guardrails/https://security-recipes.ai/prompt-library/general/crypto-defi/erc4626-vault-inflation-and-rounding-guardrails/Sun, 14 Jun 2026 00:00:00 GMTUse this prompt to harden ERC-4626 vaults and vault-like share systems against first-depositor inflation, donation attacks, and unsafe rounding.https://security-recipes.ai/prompt-library/general/crypto-defi/permit-and-meta-transaction-replay-guardrails/https://security-recipes.ai/prompt-library/general/crypto-defi/permit-and-meta-transaction-replay-guardrails/Sun, 14 Jun 2026 00:00:00 GMTUse this prompt to prevent signature replay across chains, contracts, forks, functions, and repeated permit or meta-transaction execution.https://security-recipes.ai/prompt-library/general/crypto-defi/cross-chain-message-authenticity-guardrails/https://security-recipes.ai/prompt-library/general/crypto-defi/cross-chain-message-authenticity-guardrails/Sun, 14 Jun 2026 00:00:00 GMTUse this prompt to harden cross-chain message handlers against forged payloads, chain replay, untrusted relayers, and missing proof checks.https://security-recipes.ai/prompt-library/general/crypto-defi/dex-slippage-and-mev-guardrails/https://security-recipes.ai/prompt-library/general/crypto-defi/dex-slippage-and-mev-guardrails/Sun, 14 Jun 2026 00:00:00 GMTUse this prompt to harden swaps, liquidations, rebalances, and routing flows against missing slippage checks and predictable-ordering risk.https://security-recipes.ai/prompt-library/general/source-code-attack-surface-map/https://security-recipes.ai/prompt-library/general/source-code-attack-surface-map/Sat, 06 Jun 2026 00:00:00 GMTA tool-agnostic source-code audit recipe that asks an agent to map where untrusted input enters a repository, where privileged actions happen, and which trust boundaries deserve deeper review.https://security-recipes.ai/prompt-library/general/source-code-authz-tenant-boundary-audit/https://security-recipes.ai/prompt-library/general/source-code-authz-tenant-boundary-audit/Sat, 06 Jun 2026 00:00:00 GMTA focused source-code audit recipe for authorization, tenant isolation, object ownership, and privilege-boundary mistakes. It is designed for code review sessions where the question is not "is there …https://security-recipes.ai/prompt-library/general/cve-intelligence-intake-gate/https://security-recipes.ai/prompt-library/general/cve-intelligence-intake-gate/Sat, 06 Jun 2026 00:00:00 GMTA tool-agnostic prompt that turns a fresh CVE, GHSA, OSV, vendor bulletin, scanner alert, or ticket into one of five bounded outcomes:https://security-recipes.ai/prompt-library/general/source-code-injection-sink-audit/https://security-recipes.ai/prompt-library/general/source-code-injection-sink-audit/Sat, 06 Jun 2026 00:00:00 GMTA source-code audit recipe for tracing untrusted input into dangerous sinks: SQL, shell, template rendering, SSRF, deserialization, file paths, regular expressions, dynamic evaluation, and …https://security-recipes.ai/prompt-library/general/source-code-secrets-data-exposure-audit/https://security-recipes.ai/prompt-library/general/source-code-secrets-data-exposure-audit/Sat, 06 Jun 2026 00:00:00 GMTA source-code audit recipe for finding places where secrets, tokens, credentials, regulated data, or customer content can leak through code, logs, telemetry, prompts, artifacts, exports, caches, or …https://security-recipes.ai/prompt-library/general/source-code-supply-chain-build-integrity-audit/https://security-recipes.ai/prompt-library/general/source-code-supply-chain-build-integrity-audit/Sat, 06 Jun 2026 00:00:00 GMTA source-code audit recipe for dependency hygiene, lockfile integrity, build and CI trust boundaries, generated artifacts, package publishing, and release provenance.https://security-recipes.ai/prompt-library/general/crypto-defi/hot-wallet-transaction-policy-enforcement/https://security-recipes.ai/prompt-library/general/crypto-defi/hot-wallet-transaction-policy-enforcement/Sun, 26 Apr 2026 00:00:00 GMTUse this prompt to harden a hot-wallet signing pipeline so unsafe transactions are blocked before they can be signed.https://security-recipes.ai/prompt-library/general/crypto-defi/crypto-payment-address-integrity-check/https://security-recipes.ai/prompt-library/general/crypto-defi/crypto-payment-address-integrity-check/Sun, 26 Apr 2026 00:00:00 GMTUse this prompt to prevent destination-address substitution and address-poisoning mistakes in crypto payment systems.https://security-recipes.ai/prompt-library/general/crypto-defi/seed-phrase-and-key-material-purge/https://security-recipes.ai/prompt-library/general/crypto-defi/seed-phrase-and-key-material-purge/Sun, 26 Apr 2026 00:00:00 GMTUse this prompt to locate and remove exposed wallet seed phrases, private keys, and signing credentials from code and operational systems.https://security-recipes.ai/prompt-library/general/crypto-defi/smart-contract-upgrade-diff-risk-review/https://security-recipes.ai/prompt-library/general/crypto-defi/smart-contract-upgrade-diff-risk-review/Sun, 26 Apr 2026 00:00:00 GMTUse this prompt to review upgrade diffs and enforce invariant checks before smart-contract changes are approved.https://security-recipes.ai/prompt-library/general/crypto-defi/defi-oracle-manipulation-guardrails/https://security-recipes.ai/prompt-library/general/crypto-defi/defi-oracle-manipulation-guardrails/Sun, 26 Apr 2026 00:00:00 GMTUse this prompt to add and verify protections against oracle-based price manipulation in DeFi execution paths.https://security-recipes.ai/prompt-library/general/crypto-defi/defi-bridge-and-multisig-emergency-response/https://security-recipes.ai/prompt-library/general/crypto-defi/defi-bridge-and-multisig-emergency-response/Sun, 26 Apr 2026 00:00:00 GMTUse this prompt to codify emergency response for bridge and multisig incidents where rapid containment is required.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/php-unserialize/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/php-unserialize/Sun, 26 Apr 2026 00:00:00 GMTReplace unsafe `unserialize` usage with JSON or strict allowed-class deserialization; add tests that preserve payload behavior.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/ruby-marshal-yaml-load/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/ruby-marshal-yaml-load/Sun, 26 Apr 2026 00:00:00 GMTReplace `Marshal.load` and unsafe YAML loading with safe parsers, typed coercion, and strict migration tests.https://security-recipes.ai/prompt-library/general/sast-finding-triage-and-fix/https://security-recipes.ai/prompt-library/general/sast-finding-triage-and-fix/Sat, 25 Apr 2026 00:00:00 GMTA tool-agnostic prompt that takes a single SAST finding and either opens a reviewer-ready PR (true positive, fixable), opens a suppression PR with justification and an expiry (confirmed false …https://security-recipes.ai/prompt-library/general/base-image-bump/https://security-recipes.ai/prompt-library/general/base-image-bump/Sat, 25 Apr 2026 00:00:00 GMTA tool-agnostic prompt that takes a CVE finding scoped to a base image or an OS-package layer, and produces a reviewer-ready PR that bumps the FROM line (or the package install layer), rebuilds the …https://security-recipes.ai/prompt-library/general/compromised-package-cache-quarantine/https://security-recipes.ai/prompt-library/general/compromised-package-cache-quarantine/Sat, 25 Apr 2026 00:00:00 GMTA tool-agnostic prompt that takes a "this package is malicious" advisory and runs the eviction across the org's registries, caches, and mirrors — quarantining the artifact, verifying the purge …https://security-recipes.ai/prompt-library/general/agent-session-kill-rules/https://security-recipes.ai/prompt-library/general/agent-session-kill-rules/Sat, 25 Apr 2026 00:00:00 GMTA tool-agnostic prompt that takes a workflow's run telemetry and a draft set of decision rules, and produces (a) a vetted rule pack the session monitor can load and (b) a synthetic red-team exercise …https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/python-pickle/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/python-pickle/Sat, 25 Apr 2026 00:00:00 GMTReplace pickle on untrusted input; mitigate via a restricted unpickler with an explicit class allowlist.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/pyyaml-load/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/pyyaml-load/Sat, 25 Apr 2026 00:00:00 GMTDefault to `yaml.safe_load`; install an import-time shim that defaults the loader for legacy callers.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/java-deserialization/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/java-deserialization/Sat, 25 Apr 2026 00:00:00 GMTReplace with JSON serializers; mitigate via JEP 290 deserialization filters with a strict class allowlist.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/xxe-xml-defaults/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/xxe-xml-defaults/Sat, 25 Apr 2026 00:00:00 GMTPer-language parser hardening: defusedxml for Python, factory feature flags for Java, libxml entity-loading off in PHP.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/jwt-alg-none/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/jwt-alg-none/Sat, 25 Apr 2026 00:00:00 GMTForce an explicit algorithm allowlist on every verify call; reject `none` at the import boundary.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/eval-and-function-constructor/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/eval-and-function-constructor/Sat, 25 Apr 2026 00:00:00 GMTReplace with parsers or restricted evaluators; add a CSP `script-src` ban on `unsafe-eval` for browser code.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/requests-verify-false/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/requests-verify-false/Sat, 25 Apr 2026 00:00:00 GMTInstall the right CA bundle; add a fail-closed shim that refuses `verify=False` outside an opt-in test environment.https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/prototype-pollution-merge/https://security-recipes.ai/prompt-library/general/classic-vulnerable-defaults/prototype-pollution-merge/Sat, 25 Apr 2026 00:00:00 GMTFilter `__proto__` / `constructor` / `prototype` keys at parse boundaries; replace hand-rolled merges with vetted utilities.https://security-recipes.ai/prompt-library/general/owasp-top-10-2026-audit/https://security-recipes.ai/prompt-library/general/owasp-top-10-2026-audit/Wed, 22 Apr 2026 00:00:00 GMTA tool-agnostic hunt prompt that walks an agent through a structured audit of a repository against every category in the OWASP Top 10 (2026 iteration). The output is a prioritised report with …https://security-recipes.ai/prompt-library/general/owasp-top-10-2025-audit/https://security-recipes.ai/prompt-library/general/owasp-top-10-2025-audit/Wed, 22 Apr 2026 00:00:00 GMTA tool-agnostic hunt prompt that walks an agent through a structured audit of a repository against every category in the OWASP Web Application Top 10:2025. As of 2026-05-02, OWASP's official …https://security-recipes.ai/prompt-library/general/owasp-top-10-2026-remediate/https://security-recipes.ai/prompt-library/general/owasp-top-10-2026-remediate/Wed, 22 Apr 2026 00:00:00 GMTA tool-agnostic remediation prompt that takes a single finding from an OWASP Top 10 (2026) audit — or any equivalent source — and turns it into a reviewer-ready pull request. Includes …https://security-recipes.ai/prompt-library/general/owasp-top-10-2025-remediate/https://security-recipes.ai/prompt-library/general/owasp-top-10-2025-remediate/Wed, 22 Apr 2026 00:00:00 GMTA tool-agnostic remediation prompt that takes a single finding from an OWASP Web Application Top 10:2025 audit — or any equivalent source — and turns it into a reviewer-ready pull request. Includes …