Add New Security Prompt.prompt
--- agent: "security-prompt-engineer" description: "Generate a new root-level security prompt (prompts/*.prompt.md) that matches the library’s structure and produces deterministic outputs." --- Goal: Create a new security-focused prompt file for this library. Inputs: - Prompt filename (kebab-case): ${input:filename:Example: ssrf-review.prompt.md} - Prompt title: ${input:title:Example: SSRF Review} - Target vulnerabilities / theme: ${input:theme:Example: SSRF + egress controls + URL parsing} - Intended use case: ${input:use_case:Example: Review a service that fetches remote URLs from user input} - Output artifact needed: ${input:output:Example: Findings table + recommended fixes + verification steps} Requirements: - Create: `prompts/${input:filename:...}` - Use the library’s root prompt template: - Title - Context/Assumptions - Procedure - Output Format (deterministic headings/fields) - Quality checks (evidence-first + anti-hallucination) - Include at least one concrete example of the expected output format. Output: - Brief explanation (why this prompt is useful) - Full file contents in a fenced `md` block
fill the variables
This prompt has 4 variables. Pro fills them into a ready-to-paste prompt for you — no manual find-and-replace.
{input:filename:Example: ssrf-review.prompt.md}{input:title:Example: SSRF Review}{input:theme:Example: SSRF + egress controls + URL parsing}{input:filename:...}
Unlock with Pro →when to use it
Community prompt sourced from the open-source GitHub repo Robotti-io/copilot-security-instructions (Apache-2.0). A "Add New Security Prompt.prompt" style prompt — adapt the placeholders and specifics to your task. Imported as-is and not independently retested here, so check the output before relying on it.
tags
codingcommunitydeveloper
source
Robotti-io/copilot-security-instructions · Apache-2.0
more in Coding
Coding✓ tested
Senior code review (strict mode)
senior staff engineer running a merciless but fair review
Coding✓ tested
Debug by hypothesis, not by guessing
debugging partner who forms theories before touching code
Coding✓ tested
Generate tests from described behavior
test engineer who writes tests that would actually catch regressions