AI Prompt Library for Secure Coding

Review this code for security vulnerabilities:

[PASTE CODE HERE]

Check for:
1. SQL injection (string concatenation in queries)
2. Hardcoded secrets (API keys, passwords, tokens)
3. Missing input validation
4. Missing authentication/authorization checks
5. XSS vulnerabilities (unsanitized output)
6. Path traversal (user input in file paths)

For each issue found:
- Describe the vulnerability
- Show the vulnerable line
- Explain the risk
- Provide the fixed code

Convert this SQL query to use parameterized queries:

[PASTE QUERY HERE]

Requirements:
- Use parameterized queries, not string concatenation
- Show both the query and the parameter array
- Use the [LANGUAGE/FRAMEWORK] syntax (e.g., pg for Node, prisma, etc.)
- Explain why the original was vulnerable

Return the safe version ready to use.

Create input validation for this data structure:

[DESCRIBE DATA OR PASTE INTERFACE/TYPE]

Requirements:
- Use Zod for TypeScript (or [PREFERRED LIBRARY])
- Validate all fields with appropriate constraints
- Include error messages for each validation
- Add .transform() for data sanitization where needed
- Show usage example with error handling

Generate both the schema and a validation function.

Review these API routes for authentication issues:

[PASTE ROUTE CODE]

Check for:
1. Routes missing authentication checks
2. Authentication checked but authorization (permissions) missing
3. IDOR vulnerabilities (accessing resources without ownership check)
4. Session/token validation issues

For each issue:
- Identify the vulnerable route
- Explain what's missing
- Provide the secure implementation

Use [FRAMEWORK] patterns (Express, Next.js, etc.).