Review an App for Pre-Deployment Security Risks

Format

Text Parameterized

Inputs

application_materials (code, document, text) · Required

Outputs

security_review (text)

Replace the ${…} placeholders with your values before using this prompt. See parameters and defaults below.

Review the application materials below for security risks before deployment. Treat AI-generated code as untrusted and assess it against the OWASP Top 10.

Specifically check:
- Whether one user can access another user's data.
- Whether admin routes are properly protected.
- Whether environment files or secrets are committed to Git.
- Whether API keys or other secrets are exposed in frontend code.
- Whether dependencies have known vulnerabilities.
- Whether error messages expose stack traces or other sensitive details.

Report each finding with its severity, the relevant file or code location when available, why it matters, and a practical remediation. Also identify checks you could not verify from the supplied materials. Do not assume the app is secure just because it runs.

Application materials:
${application-materials}