# Tool: Write Prompt for Cyber Security Vulnerability Scan

> Protect your codebase with the BOPINK Cyber Security Audit Engine. Built for Security Analysts, DevSecOps Specialists, and Code Reviewers, this tool engineers prompts that direct AI models to execute static application security testing (SAST). It identifies SQL/NoSQL injection vectors, Cross-Site Scripting (XSS), CSRF flaws, hardcoded secrets, and unsafe deserialization, outputting remediated patches with CVE references.

**Category**: prompts-code-design | **Target AI Models**: Gemini 3.1 Pro, Claude 3.5 Sonnet

## Domain Parameters:
- `scanStandard` (select): Security Compliance Standard (Default: "OWASP Top 10")
- `remediationFormat` (select): Remediation Output (Default: "Code Patch Diff")
- `checkHardcodedSecrets` (toggle): Exposed Secrets & RSA Key Scan (Default: "true")
- `threatScope` (multiselect): Target Threat Vectors (Default: "SQL/NoSQLi,XSS,Broken Auth")

## Master Prompt Engineering Architecture (5 Pillars):
1. **Role & Persona**: Domain expert framing
2. **Task & Deliverable**: Primary objective & constraints
3. **Context & Parameters**: Technical specs & camera/stack parameters
4. **Negative Constraints**: Forbidden artifacts & bad practices
5. **Output Spec**: Section formatting & XML/Markdown structure

## Programmatic API Execution:
```http
POST /api/generate-prompt
Content-Type: application/json

{
  "toolSlug": "write-prompt-for-cyber-security-vulnerability-scan",
  "rawPrompt": "Your raw concept here",
  "thinkingLevel": "HIGH"
}
```