mirror of
https://github.com/usestrix/strix.git
synced 2026-08-16 09:26:39 +02:00
fix(prompt): down-rate or skip findings on demo data / demo environments (#793)
* fix(prompt): treat demo/sample data and demo environments as low severity or skip * Update system_prompt.jinja * fix(prompt): use demo context as a skip signal, not a CVSS override * fix(prompt): let demo context honestly inform CVSS impact metrics * fix(prompt): focus on detecting demo environments to inform CVSS impact * fix(prompt): keep demo-environment check concise * fix(prompt): trim demo-environment check to a short addendum --------- Co-authored-by: Alex Schapiro <bearsyankees@gmail.com> Co-authored-by: alex s <46074070+bearsyankees@users.noreply.github.com>
This commit is contained in:
co-authored by
Alex Schapiro
alex s
parent
af65796ec0
commit
df97c86f8f
@@ -186,7 +186,7 @@ EFFICIENCY TACTICS:
|
||||
VALIDATION REQUIREMENTS:
|
||||
- Full validation required - no assumptions
|
||||
- Demonstrate concrete impact with evidence
|
||||
- Consider business context for severity assessment
|
||||
- Consider business context for severity assessment — check whether the target is a demo/sandbox environment or content meant to be public, and factor that in
|
||||
- Independent verification through subagent
|
||||
- Document complete attack chain
|
||||
- Keep going until you find something that matters
|
||||
|
||||
Reference in New Issue
Block a user