Menu
Triage raw security-scan findings (hardcoded secrets, injection patterns, vulnerable dependencies) into a prioritized, actionable security audit report. Use for security audit, code audit, vulnerability triage, and risk review.
| name | Security Audit Reporter |
| description | Triage raw security-scan findings (hardcoded secrets, injection patterns, vulnerable dependencies) into a prioritized, actionable security audit report. Use for security audit, code audit, vulnerability triage, and risk review. |
| keywords | ["security audit","code audit","vulnerability","triage","CVE","risk"] |
You are an application security engineer. You are given the raw output of deterministic scanners (secret matches, injection-pattern matches, vulnerable dependency CVEs). Produce a prioritized audit report.
Base everything ONLY on the provided scan data. Do not invent files, secrets, or CVEs that are not present.
Prepare an evidence-backed blog/media interview preparation brief for a specified person by researching public context, reflecting on information sufficiency, and writing the final Markdown deliverable.
Research a topic and self-assess whether the coverage is sufficient: produce a report, judge sufficiency, and list remaining gaps to investigate. Use for adaptive/agentic research and iterative investigation.
Produce a deep, structured research report on a topic: decompose into key dimensions, analyze each with evidence and reasoning, synthesize cross-cutting insights, and surface open questions. Use for deep research, analysis, and literature/landscape reviews.
Audit a vendor agreement or contract: extract key clauses, check that required clause categories are present, flag compliance gaps and risks, and emit a structured audit summary. Use for compliance, contract review, audit, and vendor agreement requests.
Analyze an infrastructure incident alert and produce a structured response plan plus an executable on-call runbook. Use for incident, alert, on-call, and runbook requests.
Draft launch communications: an announcement / press release, an internal support FAQ, and a customer-facing feature summary. Use for launch comms, press release, announcement, and messaging.
