Skip to main content
Prompts Comprehensive Repository Bug Analysis and Fixer

developer coding template risk: medium

Comprehensive Repository Bug Analysis and Fixer

The prompt tasks the model with acting as a repository analysis and bug-fixing expert to systematically analyze the entire repository, identify and categorize bugs and vulnerabilit…

  • Policy sensitive
  • Human review

PROMPT

Act as a comprehensive repository analysis and bug-fixing expert. You are tasked with conducting a thorough analysis of the entire repository to identify, prioritize, fix, and document ALL verifiable bugs, security vulnerabilities, and critical issues across any programming language, framework, or technology stack.

Your task is to:
- Perform a systematic and detailed analysis of the repository.
- Identify and categorize bugs based on severity, impact, and complexity.
- Develop a step-by-step process for fixing bugs and validating fixes.
- Document all findings and fixes for future reference.

## Phase 1: Initial Repository Assessment
You will:
1. Map the complete project structure (e.g., src/, lib/, tests/, docs/, config/, scripts/).
2. Identify the technology stack and dependencies (e.g., package.json, requirements.txt).
3. Document main entry points, critical paths, and system boundaries.
4. Analyze build configurations and CI/CD pipelines.
5. Review existing documentation (e.g., README, API docs).

## Phase 2: Systematic Bug Discovery
You will identify bugs in the following categories:
1. **Critical Bugs:** Security vulnerabilities, data corruption, crashes, etc.
2. **Functional Bugs:** Logic errors, state management issues, incorrect API contracts.
3. **Integration Bugs:** Database query errors, API usage issues, network problems.
4. **Edge Cases:** Null handling, boundary conditions, timeout issues.
5. **Code Quality Issues:** Dead code, deprecated APIs, performance bottlenecks.

### Discovery Methods:
- Static code analysis.
- Dependency vulnerability scanning.
- Code path analysis for untested code.
- Configuration validation.

## Phase 3: Bug Documentation & Prioritization
For each bug, document:
- BUG-ID, Severity, Category, File(s), Component.
- Description of current and expected behavior.
- Root cause analysis.
- Impact assessment (user/system/business).
- Reproduction steps and verification methods.
- Prioritize bugs based on severity, user impact, and complexity.

## Phase 4: Fix Implementation
1. Create an isolated branch for each fix.
2. Write a failing test first (TDD).
3. Implement minimal fixes and verify tests pass.
4. Run regression tests and update documentation.

## Phase 5: Testing & Validation
1. Provide unit, integration, and regression tests for each fix.
2. Validate fixes using comprehensive test structures.
3. Run static analysis and verify performance benchmarks.

## Phase 6: Documentation & Reporting
1. Update inline code comments and API documentation.
2. Create an executive summary report with findings and fixes.
3. Deliver results in Markdown, JSON/YAML, and CSV formats.

## Phase 7: Continuous Improvement
1. Identify common bug patterns and recommend preventive measures.
2. Propose enhancements to tools, processes, and architecture.
3. Suggest monitoring and logging improvements.

## Constraints:
- Never compromise security for simplicity.
- Maintain an audit trail of changes.
- Follow semantic versioning for API changes.
- Document assumptions and respect rate limits.

Use variables like ${repositoryName} for repository-specific details. Provide detailed documentation and code examples when necessary.

INPUTS

repositoryName REQUIRED

Identifier or name of the specific repository to analyze

e.g. my-project-repo

REQUIRED CONTEXT

  • repository structure
  • repository code
  • technology stack and dependencies

OPTIONAL CONTEXT

  • build configurations
  • CI/CD pipelines
  • existing documentation

ROLES & RULES

Role assignments

  • Act as a comprehensive repository analysis and bug-fixing expert.
  1. Never compromise security for simplicity.
  2. Maintain an audit trail of changes.
  3. Follow semantic versioning for API changes.
  4. Document assumptions and respect rate limits.

EXPECTED OUTPUT

Format
markdown
Schema
markdown_sections · BUG-ID, Severity, Category, File(s), Component, Description of current and expected behavior., Root cause analysis., Impact assessment (user/system/business)., Reproduction steps and verification methods., Executive summary report
Constraints
  • Deliver results in Markdown, JSON/YAML, and CSV formats
  • Include executive summary report
  • Provide detailed documentation and code examples

SUCCESS CRITERIA

  • Perform a systematic and detailed analysis of the repository.
  • Identify and categorize bugs based on severity, impact, and complexity.
  • Develop a step-by-step process for fixing bugs and validating fixes.
  • Document all findings and fixes for future reference.
  • Prioritize bugs based on severity, user impact, and complexity.

FAILURE MODES

  • Scope too broad for complete analysis without full repository access.
  • May prioritize documentation over actual fixes.
  • Rigid phases may not adapt to repo size or type.

CAVEATS

Dependencies
  • Requires full repository code and structure.
  • Requires technology stack details like package.json or requirements.txt.
  • Uses variables like ${repositoryName} for specifics.
Missing context
  • Repository access method or content (e.g., URL, full code).
  • Severity scale definition (e.g., high/medium/low criteria).
  • Output format priorities among Markdown, JSON/YAML, CSV.
Ambiguities
  • Does not specify how the repository is provided (e.g., GitHub URL, code dump, zip file).
  • Unclear how to perform 'static code analysis' or 'dependency scanning' without tools or repo access.
  • 'Verifiable bugs' undefined without runtime or test execution details.

QUALITY

OVERALL
0.89
CLARITY
0.95
SPECIFICITY
0.92
REUSABILITY
0.90
COMPLETENESS
0.80

IMPROVEMENT SUGGESTIONS

  • Add input placeholder: 'Analyze the repository at ${repo_url} or provided code: ${code_content}'.
  • Define severity levels explicitly, e.g., 'Critical: CVSS >=7, crashes; High: data loss...'
  • Include example BUG-ID format and report structure.
  • Clarify LLM simulation vs. actual tool use for analysis phases.

USAGE

Copy the prompt above and paste it into your AI of choice — Claude, ChatGPT, Gemini, or anywhere else you're working. Replace any placeholder sections with your own context, then ask for the output.

MORE FOR DEVELOPER