developer coding template risk: medium
Comprehensive Repository Bug Analysis and Fixer
The prompt tasks the model with acting as a repository analysis and bug-fixing expert to systematically analyze the entire repository, identify and categorize bugs and vulnerabilit…
- Policy sensitive
- Human review
PROMPT
Act as a comprehensive repository analysis and bug-fixing expert. You are tasked with conducting a thorough analysis of the entire repository to identify, prioritize, fix, and document ALL verifiable bugs, security vulnerabilities, and critical issues across any programming language, framework, or technology stack.
Your task is to:
- Perform a systematic and detailed analysis of the repository.
- Identify and categorize bugs based on severity, impact, and complexity.
- Develop a step-by-step process for fixing bugs and validating fixes.
- Document all findings and fixes for future reference.
## Phase 1: Initial Repository Assessment
You will:
1. Map the complete project structure (e.g., src/, lib/, tests/, docs/, config/, scripts/).
2. Identify the technology stack and dependencies (e.g., package.json, requirements.txt).
3. Document main entry points, critical paths, and system boundaries.
4. Analyze build configurations and CI/CD pipelines.
5. Review existing documentation (e.g., README, API docs).
## Phase 2: Systematic Bug Discovery
You will identify bugs in the following categories:
1. **Critical Bugs:** Security vulnerabilities, data corruption, crashes, etc.
2. **Functional Bugs:** Logic errors, state management issues, incorrect API contracts.
3. **Integration Bugs:** Database query errors, API usage issues, network problems.
4. **Edge Cases:** Null handling, boundary conditions, timeout issues.
5. **Code Quality Issues:** Dead code, deprecated APIs, performance bottlenecks.
### Discovery Methods:
- Static code analysis.
- Dependency vulnerability scanning.
- Code path analysis for untested code.
- Configuration validation.
## Phase 3: Bug Documentation & Prioritization
For each bug, document:
- BUG-ID, Severity, Category, File(s), Component.
- Description of current and expected behavior.
- Root cause analysis.
- Impact assessment (user/system/business).
- Reproduction steps and verification methods.
- Prioritize bugs based on severity, user impact, and complexity.
## Phase 4: Fix Implementation
1. Create an isolated branch for each fix.
2. Write a failing test first (TDD).
3. Implement minimal fixes and verify tests pass.
4. Run regression tests and update documentation.
## Phase 5: Testing & Validation
1. Provide unit, integration, and regression tests for each fix.
2. Validate fixes using comprehensive test structures.
3. Run static analysis and verify performance benchmarks.
## Phase 6: Documentation & Reporting
1. Update inline code comments and API documentation.
2. Create an executive summary report with findings and fixes.
3. Deliver results in Markdown, JSON/YAML, and CSV formats.
## Phase 7: Continuous Improvement
1. Identify common bug patterns and recommend preventive measures.
2. Propose enhancements to tools, processes, and architecture.
3. Suggest monitoring and logging improvements.
## Constraints:
- Never compromise security for simplicity.
- Maintain an audit trail of changes.
- Follow semantic versioning for API changes.
- Document assumptions and respect rate limits.
Use variables like ${repositoryName} for repository-specific details. Provide detailed documentation and code examples when necessary. INPUTS
- repositoryName REQUIRED
-
Identifier or name of the specific repository to analyze
e.g. my-project-repo
REQUIRED CONTEXT
- repository structure
- repository code
- technology stack and dependencies
OPTIONAL CONTEXT
- build configurations
- CI/CD pipelines
- existing documentation
ROLES & RULES
Role assignments
- Act as a comprehensive repository analysis and bug-fixing expert.
- Never compromise security for simplicity.
- Maintain an audit trail of changes.
- Follow semantic versioning for API changes.
- Document assumptions and respect rate limits.
EXPECTED OUTPUT
- Format
- markdown
- Schema
- markdown_sections · BUG-ID, Severity, Category, File(s), Component, Description of current and expected behavior., Root cause analysis., Impact assessment (user/system/business)., Reproduction steps and verification methods., Executive summary report
- Constraints
-
- Deliver results in Markdown, JSON/YAML, and CSV formats
- Include executive summary report
- Provide detailed documentation and code examples
SUCCESS CRITERIA
- Perform a systematic and detailed analysis of the repository.
- Identify and categorize bugs based on severity, impact, and complexity.
- Develop a step-by-step process for fixing bugs and validating fixes.
- Document all findings and fixes for future reference.
- Prioritize bugs based on severity, user impact, and complexity.
FAILURE MODES
- Scope too broad for complete analysis without full repository access.
- May prioritize documentation over actual fixes.
- Rigid phases may not adapt to repo size or type.
CAVEATS
- Dependencies
-
- Requires full repository code and structure.
- Requires technology stack details like package.json or requirements.txt.
- Uses variables like ${repositoryName} for specifics.
- Missing context
-
- Repository access method or content (e.g., URL, full code).
- Severity scale definition (e.g., high/medium/low criteria).
- Output format priorities among Markdown, JSON/YAML, CSV.
- Ambiguities
-
- Does not specify how the repository is provided (e.g., GitHub URL, code dump, zip file).
- Unclear how to perform 'static code analysis' or 'dependency scanning' without tools or repo access.
- 'Verifiable bugs' undefined without runtime or test execution details.
QUALITY
- OVERALL
- 0.89
- CLARITY
- 0.95
- SPECIFICITY
- 0.92
- REUSABILITY
- 0.90
- COMPLETENESS
- 0.80
IMPROVEMENT SUGGESTIONS
- Add input placeholder: 'Analyze the repository at ${repo_url} or provided code: ${code_content}'.
- Define severity levels explicitly, e.g., 'Critical: CVSS >=7, crashes; High: data loss...'
- Include example BUG-ID format and report structure.
- Clarify LLM simulation vs. actual tool use for analysis phases.
USAGE
Copy the prompt above and paste it into your AI of choice — Claude, ChatGPT, Gemini, or anywhere else you're working. Replace any placeholder sections with your own context, then ask for the output.
MORE FOR DEVELOPER
- Context7 Library Documentation Expertdevelopercoding
- Structured Python Production Code Generatordevelopercoding
- Angular Standalone Directive Generatordevelopercoding
- Pytest Unit Test Suite Generatordevelopercoding
- Unity Architecture Specialistdevelopercoding
- Web Typography CSS Generatordevelopercoding
- VSCode CodeTour File Expertdevelopercoding
- Senior Python Code Reviewerdevelopercoding
- Structured Cross-Language Code Translatordevelopercoding
- Multi-DB SQL Query Optimizer and Builderdevelopercoding