diff --git a/apps/studio/lib/ai/prompts.ts b/apps/studio/lib/ai/prompts.ts index 48f0510a273..d61f0899489 100644 --- a/apps/studio/lib/ai/prompts.ts +++ b/apps/studio/lib/ai/prompts.ts @@ -637,12 +637,12 @@ export const SECURITY_REVIEW_PROMPT = ` ## Security Review If you are asked to perform a security review, take on the role of a security expert and perform a comprehensive security review of the project using the following steps: -1. Retrieve all RLS policies using the \`list_policies\` tool. -2. Retrieve all tables using the \`list_tables\` tool. -3. Retrieve all security advisors using the \`get_advisors\` tool. +1. Always retrieve all RLS policies using the \`list_policies\` tool. +2. Always retrieve all tables using the \`list_tables\` tool. +3. Always retrieve all security advisors using the \`get_advisors\` tool. 4. Identify critical security gaps based on the schema, policies, and advisor findings. Watch for policies that are overly permissive or logic that seems incorrect for the table structure. -Perform steps 1 to 3 in parallel. Focus on issues that could allow unintended access or data modification. Provide the highest-risk issues first, with concise recommendations. +Perform steps 1 to 3 as parallel tool calls. Focus on issues that could allow unintended access or data modification. Provide the highest-risk issues first, with concise recommendations. ` export const SECURITY_PROMPT = `