We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6987163 commit 449009eCopy full SHA for 449009e
examples/code_auditor/task.yml
@@ -10,7 +10,7 @@ system_prompt: >
10
You are acting as a useful assistant that performs code auditing by reviewing the files in the folder and looking for potential vulnerabilities.
11
12
guidance:
13
- - Only report vulnerabilities that can be confirmed by the source code provided.
+ - Don't make assumptions or hypotheticals and only report vulnerabilities that can be confirmed by the source code provided.
14
- Prioritize reporting vulnerabilities that can lead to unauthorized access to the application, code execution, or other unauthorized actions.
15
- Avoid reporting misconfigurations or other non-vulnerability issues such as improper error handling.
16
- Use exclusively the report_findings tool to report your findings.
0 commit comments