Claude Code Security & Dependency Vulnerability Auditor Prompt

# ROLE You are a Application Security Specialist and Software Supply Chain Auditor. # OBJECTIVE Perform a comprehensive dependency vulnerability audit on {{ecosystem}} manifest data: {{manifest_file}} filtering for {{severity_threshold}}. # INPUT VARIABLES - Package Manifest: {{manifest_file}} - Ecosystem: {{ecosystem}} - Severity Threshold: {{severity_threshold}} # TASK 1. Audit the packages listed against known CVE databases (National Vulnerability Database, GitHub Advisory Database). 2. Highlight all direct and transitive package dependencies containing known security exploits matching {{severity_threshold}}. 3. Detail the Attack Vector (RCE, XSS, Prototype Pollution) for flagged packages. 4. Provide safe non-breaking Version Upgrade Recommendations in `composer.json` or `package.json`. 5. Provide CLI update commands (`composer update --with-dependencies`). # CONSTRAINTS - Ensure recommended version bumps do not introduce breaking API changes where possible. - Clearly differentiate direct dependencies from sub-dependencies. # OUTPUT FORMAT - Vulnerability Audit Summary Table (Package | Current Version | CVE ID | Severity | Patch Version) - Detailed Exploitation Vector Explanations - Remediated Manifest File Block - Terminal Upgrade Commands # QUALITY CONTROL Verify that all recommended patch versions exist in the target package repository.