# Worried about who can see or change what

Prompts to start with when a codebase shows this problem.

- [Outside input reaching sensitive actions](https://atlasscope.dev/prompts/outside-input-reaching-sensitive-actions): Follows input from outsiders to the places it can do harm.
- [Security checks that fail open](https://atlasscope.dev/prompts/security-checks-that-fail-open): Finds security checks that let people in when something goes wrong.
- [Hidden data anyone can read](https://atlasscope.dev/prompts/hidden-data-anyone-can-read): Finds data sent to the browser that the screen hides but anyone can read.
- [Settings that differ in production](https://atlasscope.dev/prompts/settings-that-differ-in-production): Finds settings that behave differently in production than anyone expects.

Source: https://atlasscope.dev/fix/worried-about-who-can-see-or-change-what