提示词创作助手（生产审核06-免费）

帮我生成一个提示词，用于让 AI 审查代码中的安全问题。

• 目标：找出 SQL 注入、XSS、认证绕过等常见漏洞
• 输出要求：按严重程度排序

只生成提示词，让 AI 帮我 review 代码。希望覆盖：

1. 可读性与命名
2. 复杂度与可测试性
3. 潜在空指针 / 资源泄漏

把下面这份提示词升级为 SkillBook 标准格式（含 PROMPT.md 与变量清单）。以下示例用于验证详情页代码高亮：

package com.example.review;

import java.util.List;
import java.util.Optional;
import java.util.stream.Collectors;

/**
 * 资深代码审查助手：分析用户代码并给出可落地的改进建议。
 */
public final class CodeReviewAssistant {

    public enum Severity { CRITICAL, HIGH, MEDIUM, LOW }

    public static final class Finding {
        private final Severity severity;
        private final String ruleId;
        private final String message;
        private final int line;

        public Finding(Severity severity, String ruleId, String message, int line) {
            this.severity = severity;
            this.ruleId = ruleId;
            this.message = message;
            this.line = line;
        }

        public Severity getSeverity() { return severity; }
        public String getRuleId() { return ruleId; }
        public String getMessage() { return message; }
        public int getLine() { return line; }
    }

    public List<Finding> review(String source) {
        // TODO: 接入静态规则引擎 / LLM 审查链路
        return Optional.ofNullable(source)
                .filter(s -> !s.isBlank())
                .map(s -> List.of(
                        new Finding(Severity.HIGH, "SEC-001", "疑似 SQL 拼接，存在注入风险", 42),
                        new Finding(Severity.MEDIUM, "QUAL-014", "方法过长，建议拆分", 88)
                ))
                .orElseGet(List::of)
                .stream()
                .sorted((a, b) -> a.getSeverity().compareTo(b.getSeverity()))
                .collect(Collectors.toList());
    }
}

type Severity = "critical" | "high" | "medium" | "low";

interface Finding {
  severity: Severity;
  ruleId: string;
  message: string;
  line: number;
}

/** 前端侧审查结果渲染（用于验证 TS 语法高亮） */
export function renderFindings(findings: Finding[]): string {
  return findings
    .map((f) => `[${f.severity.toUpperCase()}] ${f.ruleId}@L${f.line}: ${f.message}`)
    .join("\n");
}

export async function requestReview(code: string): Promise<Finding[]> {
  const res = await fetch("/api/review", {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({ code }),
  });
  if (!res.ok) throw new Error(`review failed: ${res.status}`);
  return (await res.json()) as Finding[];
}

from __future__ import annotations

from dataclasses import dataclass
from enum import Enum
from typing import Iterable, List


class Severity(str, Enum):
    CRITICAL = "critical"
    HIGH = "high"
    MEDIUM = "medium"
    LOW = "low"


@dataclass(frozen=True)
class Finding:
    severity: Severity
    rule_id: str
    message: str
    line: int


def prioritize(findings: Iterable[Finding]) -> List[Finding]:
    """按严重程度排序，供详情页示例渲染验证 Python 高亮。"""
    order = {s: i for i, s in enumerate(Severity)}
    return sorted(list(findings), key=lambda f: (order[f.severity], f.line))


if __name__ == "__main__":
    demo = [
        Finding(Severity.HIGH, "SEC-001", "疑似 SQL 拼接", 42),
        Finding(Severity.LOW, "STYLE-003", "缺少类型注解", 15),
    ]
    for item in prioritize(demo):
        print(f"[{item.severity.value}] {item.rule_id}: {item.message}")

# 本地联调：安装后验证高亮样例是否落库到 usage_examples
ace install prompt-creator
ace run prompt-creator --mode upgrade --input ./draft-prompt.md