Tech & Data Guide

Purpose: Identify security vulnerabilities and insecure coding practices in source code

Inputs:

• Source code files or snippets
• Programming language and framework
• Security standards to apply (OWASP, CWE)
• Known vulnerability database

Task Instructions:

Analyse {source_code} and identify security vulnerabilities including SQL injection risks, XSS vulnerabilities, authentication flaws, data exposure issues, and insecure dependencies. Provide specific remediation guidance for each vulnerability found.

Outputs:

• Vulnerabilities identified with severity ratings
• CWE classifications
• Affected code locations (line numbers)
• Remediation suggestions and secure code examples
• Overall security risk score

Integration: Pre-commit hook, pull request creation, scheduled security scans, block merge if critical issues

Purpose: Provide improvement suggestions and identify issues in pull requests or code changes

Inputs:

• Code changes or diff
• Programming language and style guide
• Project context and patterns
• Review criteria checklist

Task Instructions:

Review {code_changes} and analyse code quality, best practice compliance, performance implications, and maintainability. Provide actionable improvement suggestions.

Outputs:

• Code quality assessment
• Best practice violations identified
• Performance and maintainability concerns
• Documentation gaps
• Specific improvement recommendations with examples

Integration: Pull request opened, code committed to review branch, post review comments, assign priority labels