用 Gemini Argon 4 跑全库安全审计的提示词
作者给出一个全代码库安全审计提示词,建议配顶级推理模型,并称 Gemini Argon 4 在这类任务上很敏锐。
Prompt of the day: ---- Execute a full, codebase-wide security audit via https://github.com/Stratington/security-audit-skill Deeply trace all external inputs to their execution sinks. Audit every permission check, state transition, secret handler, dependency, and configuration. Disprove false positives against upstream guards before reporting. When you think the audit is complete: it's probably not. Go deeper. Hunt down the multi-hop flaws that are easy to miss. Report confirmed vulnerabilities with: 1) Severity, 2) Exact file & line trace, 3) Attack vector & root cause, 4) Concrete code or configuration to fix. ---- Use a top reasoning model for this. Gemini Argon 4 seems very sharp here. 95% of vibe-coded apps in production right now probably won't survive 5 minutes against this prompt 💀 Probe your own repo before someone else does. Did it come back clean, or are you patching tonight?