Prompt·Testing and security·T03
Outside input reaching sensitive actions
Follows input from outsiders to the places it can do harm.
Prompt
Trace every external input from entry point to sensitive operation. Investigate authorization gaps, injection risks, unsafe parsing, and tenant isolation failures.
- What it returns
- Each path: entry point, checks along the way, sensitive operation, and the missing check if any, with file:line.
- Skip it when
- Never skip for anything that holds other people's data or money.
- Changes
- Changes nothing
- Sessions
- Look first, then fix in a new session
- Tools
- Repository access.
- Also called
- Input-to-sensitive-operation tracing
Related prompts
- Security checks that fail openPromptFinds security checks that let people in when something goes wrong.
- Settings that differ in productionPromptFinds settings that behave differently in production than anyone expects.
- Hidden data anyone can readPromptFinds data sent to the browser that the screen hides but anyone can read.
More in Testing and security.