Library › Cybersecurity AI › Software developers
Review a file upload handler against the team checklist
- For Software developers
- You practice Keeping the AI to your sources
- Time about 5 minutes
About this exercise
Review this upload handler against the team's upload checklist and write one numbered line per checklist item, in checklist order, each starting 'Pass' or 'Fail' and naming the code line that shows it. Judge only what the code shows. Plain text, under 110 words.
Common mistakes when you ask AI for this
- A general security review. The AI lists every upload risk it knows instead of checking your 5 items. Try: Say: "One line per checklist item, in order."
- Fail-by-default. The AI marks items as risky even where the code clearly handles them. Try: Add: "Judge only what the code shows; Pass when it's handled."
- Trusting the PR description. The AI accepts 'I followed the checklist' and passes everything. Try: Ask: "Name the code line that proves each result."
- Trusting the AI to count words. AI is bad at counting. Ask for "under 110 words" and it often lands well over. Try: Ask for less than the limit and cap each line: "each line under 15 words, under 80 words total."
- Letting markdown in. AI adds bold and headings by default, and in the PR review they show up as stray symbols. Try: Add: "Plain text only, no bold, no headings."
What a strong prompt includes
- Uses the checklist
- Gives the labels
- Asks for line evidence
- Keeps it to the material
- Asks for plain text
Related exercises
- Accept a job offer and confirm the exact terms (Writing AI · Job seekers)
- Answer a 'where is my order' email with the real new date (Writing AI · Customer support teams)
- Answer a big discount ask with two priced options (Writing AI · Sales and customer success)
- Answer a buyer's HOA questions from the bylaws (Research & AI Search · Real estate agents)
- Answer a charge nurse application question with evidence (Writing AI · Nurses and healthcare workers)