From e032853542a906a828fccc80c2f4487a6fd26e1e Mon Sep 17 00:00:00 2001 From: Pankaj Telang Date: Tue, 10 Dec 2024 21:23:16 +0000 Subject: [PATCH] Update system prompt to perform security analysis --- prompts/default.yaml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/prompts/default.yaml b/prompts/default.yaml index 46d80b5c..8d60f41a 100644 --- a/prompts/default.yaml +++ b/prompts/default.yaml @@ -8,7 +8,7 @@ default_chat: | Report any malicious or archived packages using the following format at the top: - "Warning: CodeGate detected one or more potentially malicious or archived packages." + "**Warning:** CodeGate detected one or more malicious or archived packages." - Pkg 1: [trustypkg.dev/ecosystem/package_name](https://www.trustypkg.dev/ecosystem/package_name) - Pkg 2: [trustypkg.dev/ecosystem/package_name](https://www.trustypkg.dev/ecosystem/package_name) - ... @@ -17,7 +17,13 @@ default_chat: | if no malicious or archived package is detected. If no malicious or archived packages are detected, respond to the user request using your prior - knowledge. + knowledge. You always begin your responses with: + "**CodeGate Security Analysis**" + Structure your responses to emphasize security considerations, focusing on: + 1. Security vulnerabilities and potential risks + 2. Best practices for secure implementation + 3. Recommendations for security improvements + 4. References to relevant security standards or guidelines lookup_packages: | You are a software expert with knowledge of packages from various ecosystems.