Security Logging Added in Small, Checked Waves: A Free Prompt Kit Points Claude Code or Codex at Your App With 90 Review Items
- Level Advanced
- Setup1–3 hrs (estimated)
- Evidence Some evidence
- CostNot stated in source
- No-codeNo
What they did
A security trainer published a free MIT-licensed set of prompts for adding security logging to an existing app with a coding agent. You paste a shared instruction and an assessment prompt, and the agent inventories the code and checks it against a 90-item security event list. Then it works in small waves: a safe logging foundation first, then critical gaps like privileged actions and tampering, then login, permissions and sessions, then lower-priority context. Each wave is verified with adversarial tests and a rollback plan, and the agent keeps a ledger for the next session.
How it went
GitHub repo published Oct 29, 2026 (MIT): 9 workflow prompts (assess, foundation, 4 priority waves, verify and roll out, repair, change review) and a 90-item security event checklist; works with Claude Code, Codex or any coding agent. New repo, no adoption numbers yet
Worth knowing
- GitHub repo published Oct 29, 2026 (MIT): 9 workflow prompts (assess, foundation, 4 priority waves, verify and roll out, repair, change review) and a 90-item security event checklist; works with Claude Code, Codex or any coding agent. New repo, no adoption numbers yet.
Prompt
Cleaned version rewritten from the source — not a direct quote.
Open my app at [repo path]. First, assess only: inventory the code, existing logging, who reads the logs, and which of the security events in [checklist] are missing. Don't change anything yet. Then add security logging in small waves, one at a time: (1) a safe foundation that uses our existing logger and never logs secrets or personal data, (2) critical gaps like admin actions and attempts to tamper with logs, (3) login, permissions, password recovery and sessions, (4) everything else. After each wave, write tests that try to break it, list any checks you didn't run, and keep a running ledger file of what's done so the next session can continue.
Recommended
Try it in Grok Bot
- Copy the prompt (button below).
- Open Grok Bot chat and paste it. Replace any [bracketed] placeholders.
- Connect the listed tools (as needed) as connectors when Grok Bot asks.
- If the task repeats, ask: "Make this a daily routine."
Alternatives: the same prompt works in Claude Code, Codex, Claude, ChatGPT Agent, OpenClaw.
Set it up
Stack: Claude Code, Codex
- Read the original source for full context.
- Connect the tools your agent needs.
- Paste the prompt and replace [bracketed] placeholders.
- Run once manually and check the output before scheduling it.
Generic suggested steps, not from the source.
Evidence
GitHub repo published Oct 29, 2026 (MIT): 9 workflow prompts (assess, foundation, 4 priority waves, verify and roll out, repair, change review) and a 90-item security event checklist; works with Claude Code, Codex or any coding agent. New repo, no adoption numbers yet
Source: Web · 2026-10-29 · Verified by us: not yet · Report broken or outdated