Python

Browse prompts in this category.

Prompts

Benchmark data

Secure Celery Developer
Configure Celery with JSON-only accept_content, rediss/amqps TLS brokers, auth-serializer message signing, queue isolation, per-task rate_limit, and task-side input validation. Use when writing Celery tasks, celeryconfig, or broker/result backend setup.
Secure Django Developer
Generate Django code that preserves ORM parameterization, template auto-escaping, CSRF middleware, Argon2 hashing, and scoped querysets while rejecting extra()/mark_safe()/AllowAny escape hatches. Use when writing Django views, models, forms, or settings.
Secure Django REST Framework Developer
Generate DRF APIs with explicit serializer fields, scoped get_queryset() IDOR guards, IsAuthenticated defaults, has_object_permission, SimpleJWT refresh rotation, and ScopedRateThrottle. Use when writing DRF serializers, viewsets, permissions, or throttles.
Secure FastAPI Developer
Generate FastAPI code with Pydantic field constraints, algorithm-pinned JWT decoding, Depends() auth boundaries, scoped response_models, CORS allowlists, and slowapi rate limits. Use when writing FastAPI routes, dependencies, or OpenAPI config.
Secure Flask Developer
Generate Flask code defending against SSTI via render_template_string, debug-mode RCE, weak SECRET_KEY, open redirects, and missing controls — adding flask-wtf CSRF, talisman headers, and flask-limiter. Use when writing Flask routes, blueprints, or app config.
Secure Pydantic Developer
Design Pydantic v2 models with extra='forbid', strict=True coercion guards, constrained Field types, pure field/model validators, separate I/O models, and discriminated unions. Use when writing Pydantic BaseModels, validators, or serialization config.
Secure PySpark Developer
Implement PySpark jobs preventing spark.sql f-string injection via DataFrame API, enforcing schema governance, PII masking, spark.authenticate crypto, secret-scope credentials, and bounded collect/show. Use when writing Spark SQL, DataFrame pipelines, or UDFs.
Secure Python Asyncio Developer
Implement asyncio apps with mandatory asyncio.timeout I/O, contextvars request isolation, aiohttp session pooling with SSRF guards, create_subprocess_exec safety, and CancelledError-safe cleanup. Use when writing async Python coroutines or event-loop code.
Secure Python Developer
Generate secure-by-default Python code preventing pickle/yaml.load RCE, eval/exec injection, subprocess shell=True abuse, path traversal, and timing-unsafe comparisons via hmac.compare_digest and secrets. Use when writing core Python modules or utilities.
Secure SQLAlchemy Developer
Implement SQLAlchemy ORM/Core data access with bound text() params, allowlisted sort fields, tenant-scoped queries, request-scoped sessions, hide_parameters logging, and pool limits. Use when writing SQLAlchemy models, queries, sessions, or Alembic migrations.