From df97c86f8fa6d5284849cdff4891760e92d12066 Mon Sep 17 00:00:00 2001 From: "devin-ai-integration[bot]" <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Thu, 16 Jul 2026 22:14:36 -0400 Subject: [PATCH] fix(prompt): down-rate or skip findings on demo data / demo environments (#793) * fix(prompt): treat demo/sample data and demo environments as low severity or skip * Update system_prompt.jinja * fix(prompt): use demo context as a skip signal, not a CVSS override * fix(prompt): let demo context honestly inform CVSS impact metrics * fix(prompt): focus on detecting demo environments to inform CVSS impact * fix(prompt): keep demo-environment check concise * fix(prompt): trim demo-environment check to a short addendum --------- Co-authored-by: Alex Schapiro Co-authored-by: alex s <46074070+bearsyankees@users.noreply.github.com> --- strix/agents/prompts/system_prompt.jinja | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/strix/agents/prompts/system_prompt.jinja b/strix/agents/prompts/system_prompt.jinja index b3d8e047..e6b81611 100644 --- a/strix/agents/prompts/system_prompt.jinja +++ b/strix/agents/prompts/system_prompt.jinja @@ -186,7 +186,7 @@ EFFICIENCY TACTICS: VALIDATION REQUIREMENTS: - Full validation required - no assumptions - Demonstrate concrete impact with evidence -- Consider business context for severity assessment +- Consider business context for severity assessment — check whether the target is a demo/sandbox environment or content meant to be public, and factor that in - Independent verification through subagent - Document complete attack chain - Keep going until you find something that matters