Skip to content

security-review-llm.prompt.md

Latest commit

 

History

History
22 lines (16 loc) · 1.27 KB

security-review-llm.prompt.md

File metadata and controls

22 lines (16 loc) · 1.27 KB
Raw
name security-review-llm
agent Security Reviewer
description Run OWASP LLM and Agentic vulnerability assessments with codebase profiling
argument-hint [scope=path/to/component]

LLM and Agentic Vulnerability Scan

Caution

This prompt is an assistive tool only and does not replace professional security tooling (SAST, DAST, SCA, penetration testing, compliance scanners) or qualified human review. All AI-generated vulnerability findings must be reviewed and validated by qualified security professionals before use. AI outputs may contain inaccuracies, miss critical threats, or produce recommendations that are incomplete or inappropriate for your environment.

Inputs

  • ${input:scope}: (Optional) Specific component or directory path to focus the assessment on.

Requirements

  • Override skill selection with owasp-llm, owasp-agentic. The profiler still runs to supply codebase context, but skill detection is bypassed in favor of these two skills.
  • When ${input:scope} is provided, limit analysis to files within the specified directory or component.
  • Run in audit mode using the standard assessment and verification workflow.
  • Assess both skills independently through separate Skill Assessor invocations, then consolidate findings in a single report.