用 Gemini 4 Argon 跑全应用安全审计的提示词模板
一条可直接复用的安全审计提示词:按 Cloudflare security-audit-skill 的方法追踪不可信输入到执行点、检查鉴权与依赖,并要求按严重度、文件行号、根因和修复补丁输出;作者称 Gemini Argon 4 在此表现很敏锐。
Prompt of the day: ---- Run a full application-wide security audit strictly following the methodology in https://github.com/cloudflare/security-audit-skill Exhaustively trace all untrusted inputs to execution sinks, inspect all auth/access controls, dependencies, and configurations. Verify your findings. When you think you have found all vulnerabilities: You haven't. Keep investigating. Report vulnerabilities with: (1) severity, (2) exact file/line location, (3) root cause & attack vector, and (4) concrete remediation patches. ---- Use a top reasoning model for this. Gemini Argon 4 seems very sharp here.