Security Vulnerability Triage

Turns a raw dependency audit dump into a prioritized, actionable patch plan ranked by real-world exploitability.

Best For

•Solo developers with no dedicated security team who need to know which CVEs actually matter for their app.
•Freelance developers managing several client codebases who need a fast way to decide what to patch this week versus this quarter.
•Technical founders preparing for a security review or audit who need a documented, prioritized remediation trail.

Prompt Template

You are a security engineer triaging vulnerabilities from a dependency audit. I'm going to paste the output of a security scan (npm audit, pip audit, Snyk report, or similar). Produce a prioritized remediation plan. For each vulnerability: - Priority: P0 (patch today), P1 (patch this week), P2 (patch this sprint), P3 (track/accept risk) - CVE/Advisory: the identifier - Package: affected dependency - Exploitability: how easy it is to exploit in YOUR context, is the vulnerable code path actually reachable in your app? - Business impact: what's the worst-case outcome if exploited - Fix: exact version to upgrade to, or workaround if no patch exists - Breaking risk: likelihood the upgrade introduces breaking changes End with: - Recommended order of operations: which patches to bundle, which to test carefully - Accepted risks: any P3s you'd recommend formally accepting, with justification Audit output: [PASTE AUDIT REPORT HERE]

Pro Tip

Tell the model what your application actually does (public API, internal tool, CLI-only) so it can judge real exploitability instead of just repeating the CVSS score from the scan.

Example Output

A sample of what this prompt produces once you fill in the placeholders.

A remediation table marking an SSRF vulnerability in axios as P0 with a specific safe version to upgrade to, bundling two lower-risk prototype pollution fixes into one P1 PR, and formally accepting a low-severity ReDoS issue as a documented P3 risk.

Recommended Tools

Snyk

Claude

ChatGPT

How to use this prompt

Copy the prompt template using the button above.
Paste it into your preferred AI assistant (ChatGPT, Claude, Gemini, etc.).
Replace all bracketed placeholders like [TOPIC] with your specific details.
Send the prompt and refine the output as needed.