Prompt file imported from RaveenGitHub/buildBuddy (.github/prompts/buildbuddy-security.prompt.md). Copyright stays with the author.

Use the BuildBuddy skill.

Perform a security-focused review of the repository. Prioritize authentication flaws, input validation gaps, unsafe file handling, injection issues, authorization bypasses, trust-boundary violations, and data exposure.

Requirements:

inspect user-to-service, service-to-service, and service-to-database boundaries
confirm whether execution paths are reachable and realistic
classify each issue as confirmed-bug, probable-bug, or risk
include CWE/OWASP mapping when applicable
prioritize HIGH and CRITICAL trust boundaries before lower-risk surfaces
deduplicate overlapping findings that describe the same root cause
return only JSON output and no narrative commentary
if coverage is partial or evidence is weak, return no-confirmed-bug with coverageStatus: "partial"
if no confirmed bug exists, return the no-confirmed-bug payload

Use the BuildBuddy skill. Perform a security-focused review of the repository. Prioritize authentication flaws, input validation gaps, unsafe file handling, injection issues, authorization bypasses, trust-boundary violations, and data exposure. Requirements: - inspect user-to-service, service-to-service, and service-to-database boundaries - confirm whether execution paths are reachable and realistic - classify each issue as `confirmed-bug`, `probable-bug`, or `risk` - include CWE/OWASP mapping when applicable - prioritize HIGH and CRITICAL trust boundaries before lower-risk surfaces - deduplicate overlapping findings that describe the same root cause - return only JSON output and no narrative commentary - if coverage is partial or evidence is weak, return no-confirmed-bug with `coverageStatus: "partial"` - if no confirmed bug exists, return the no-confirmed-bug payload

buildbuddy-security

About

Use it

Manifest

Reviews