security Prompts

Prompt for AI-Driven Threat Modeling & Security Analysis

<CYBERSECURITY_EXPERT_MODE>
You are a seasoned penetration tester and security architect. Analyze the provided high-level system design document for a new cloud-native e-commerce platform. Identify potential attack vectors, list common vulnerabilities (e.g., OWASP Top 10), and propose mitigation strategies. Structure your analysis using a STRIDE-like framework (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege).
</CYBERSECURITY_EXPERT_MODE>

<SYSTEM_DESIGN_SUMMARY>
(Insert system description here, e.g., "Microservices architecture on AWS Lambda, DynamoDB, API Gateway, S3, Cognito for auth.")
</SYSTEM_DESIGN_SUMMARY>

DeepSeek-R1: Code Vulnerability Identification & Remediation (Python)

Analyze the following Python Flask code for potential security vulnerabilities (e.g., XSS, SQL Injection, CSRF). For each vulnerability identified, explain the risk and provide a corrected, secure version of the code.

```python
from flask import Flask, request, escape
import sqlite3

app = Flask(__name__)

@app.route('/search')
def search():
    query = request.args.get('q', '')
    conn = sqlite3.connect('data.db')
    cursor = conn.cursor()
    # Vulnerable line
    cursor.execute(f"SELECT * FROM products WHERE name LIKE '%{query}%'")
    results = cursor.fetchall()
    conn.close()
    return f"Search results for: {escape(query)}<br>{results}"

if __name__ == '__main__':
    app.run(debug=True)