💡 11 Prompts & Counting
AI Prompts Library
Copy-paste prompts for every job. CV, images, video, code, marketing — all in one place.
💻
Coding
Build, debug and explain code with AI.
Showing 11 prompts
A dedicated security review of your code against the OWASP Top 10 — attack scenarios, severity ratings and fixes, not vague warnings.
View prompt ↓
Security-audit this code as a penetration tester who found it in production. Context: {WHAT THE CODE DOES + WHAT DATA IT HANDLES + WHO CAN REACH IT (public internet / authenticated users / internal)}.
For each finding:
- THE ATTACK: concretely, what would an attacker send/do? Show the malicious input or sequence.
- IMPACT: what do they get — data read, data write, account takeover, denial of service?
- SEVERITY: Critical / High / Medium / Low, considering exploitability AND blast radius.
- THE FIX: actual corrected code, not "sanitize your inputs".
Check systematically: injection (SQL/command/template), broken authentication & session handling, sensitive data exposure (secrets in code, logs, errors), broken access control (IDOR — can user A reach user B's data by changing an ID?), security misconfiguration, XSS, insecure deserialization, missing rate limiting, and dependency risks if imports are visible.
End with: the ONE fix to deploy today, and what I should log/monitor to detect exploitation
attempts of the rest.
CODE: {PASTE}
Open full prompt page →
Generates tests that hunt bugs instead of confirming happy paths — edge cases, failure modes, and property checks, prioritized by risk.
View prompt ↓
Write tests for my code that actually catch bugs — not ceremony tests that assert the obvious.
Context: {LANGUAGE + TEST FRAMEWORK}. What this code must guarantee: {THE CONTRACT — e.g. "never double-charges", "output always valid JSON", "handles concurrent writes"}.
Process:
1. RISK MAP first: list the 5 most likely ways this code breaks in production (bad input, boundary values, state corruption, concurrency, external failure). Rank by damage × likelihood.
2. TESTS, in risk order:
- Boundary cases: empty, single item, maximum size, off-by-one edges, unicode/special chars\
- Failure paths: what SHOULD happen when dependencies fail, inputs are malformed, or operations are repeated (idempotency)
- One property-based test if the code has an invariant worth defending
- Happy path LAST — one test, not ten variations
3. Rules: each test name describes the behavior in plain English ("rejects_negative_amounts" not "test2"); no testing implementation details (survives refactoring); arrange-act-assert structure; no shared mutable state between tests.
4. Finish with: the ONE bug these tests are most likely to catch that manual testing would miss.
CODE:
{PASTE}
Open full prompt page →
Paste any code for a structured review — bugs, security, performance — ranked by severity, with the top fix implemented.
View prompt ↓
Review this code as a principal engineer. Language/context: {LANGUAGE, FRAMEWORK, WHAT IT DOES}.
Structure your review:
[RED] BUGS & CORRECTNESS: actual defects, edge cases that break (empty input, huge input,
concurrent access), off-by-ones. Show the failing case.
[ORANGE] SECURITY: injection, unvalidated input, secrets, authz gaps — with the attack scenario.
[YELLOW] PERFORMANCE: only issues that matter at realistic scale (N+1 queries, O(n²) on unbounded data). No micro-optimization theater.
[GREEN] MAINTAINABILITY: naming, structure, testability — max 3 items, most impactful only.
Then: the single most important fix, implemented in full.
Rules: cite line references, no style nitpicks a linter would catch, and say "this part is good" where it's good.
CODE:
{PASTE}
Open full prompt page →
Finds why your code or query is slow — measured, ranked bottlenecks with the expected speedup of each fix, not folklore optimization.
View prompt ↓
Diagnose the performance of my {CODE / SQL QUERY / ENDPOINT}. Symptoms: {WHAT'S SLOW, HOW SLOW, AT WHAT SCALE — "fine with 100 rows, dies at 100k"}. Environment: {LANGUAGE/DB + anything relevant}.
Method — measure before optimizing:
1. INSTRUMENT FIRST: tell me exactly how to measure where time goes (the profiler command, the
EXPLAIN ANALYZE, the timing wrapper) so we're not guessing.
2. HYPOTHESES: the 3 most likely bottlenecks for this pattern and scale, ranked — with the
tell-tale signature each would show in the measurement.
3. Once identified (or for your top hypothesis now), THE FIX: corrected code/query, with expected order-of-improvement ("this turns O(n²) into O(n log n) — at your 100k rows, roughly 1000× fewer operations").
4. THE HIERARCHY check — in order, because each level dwarfs the next: algorithm choice → I/O and round-trips (N+1 queries, network calls in loops) → memory allocation patterns →
micro-optimizations. Refuse to micro-optimize if a higher level is unfixed.
5. GUARD: a simple benchmark/assertion to keep in place so this regression can't sneak back.
CODE/QUERY: {PASTE}
Open full prompt page →
Paste any cryptic error or stack trace — get what it actually means, the 3 most likely causes ranked, and the fastest check for each.
View prompt ↓
Decode this error for me. Context: {LANGUAGE/FRAMEWORK + what I was doing when it happened + what
I changed recently, if anything}.
Structure your answer:
1. TRANSLATION: what this error message actually says, in one plain-English sentence. (Error
messages describe symptoms — name the symptom.)
2. WHERE TO LOOK: which line/frame in the trace is MINE vs. library noise — point at the frame
that matters.
3. LIKELY CAUSES, ranked by probability for MY context: for each — why it produces exactly this message, and a 30-second check to confirm or eliminate it (a print, a command, an inspection).
4. THE FIX for the confirmed cause — and if we can't confirm yet, the fix for cause #1 with a note on what result means "move to cause #2".
5. UNDERSTAND IT ONCE: the 2-sentence concept behind this error class, so I recognize it instantly next time.
Rule: never say "this usually means" without committing to a ranked list. Vague error help is no help.
ERROR + STACK TRACE: {PASTE}
RELEVANT CODE (if I have it): {PASTE}
Open full prompt page →
Turns a plain-English description of your app into a production-ready schema — tables, relations, indexes and the queries that shaped them.
View prompt ↓
Design a database schema for: {DESCRIBE YOUR APP AND WHAT IT STORES, IN PLAIN ENGLISH}. Database: {PostgreSQL / MySQL / SQLite / "you pick"}. Expected scale: {ROUGH USERS/ROWS or "small, might grow"}.
Process:
1. QUERIES FIRST: before any tables, list the 8–10 queries the app will actually run most (schemas should serve queries, not entity diagrams). Confirm with me if unsure.
2. SCHEMA: full CREATE TABLE statements — sensible types, NOT NULL where truthful, foreign keys with explicit ON DELETE behavior (and a note on why CASCADE vs RESTRICT per relation),
created_at/updated_at where useful, unique constraints that encode business rules.
3. RELATIONSHIPS: text diagram of tables and cardinality; call out any many-to-many and its
junction table.
4. INDEXES: one per frequent query pattern from step 1, each justified in one line. No speculative indexes.
5. THE TRAPS I AVOIDED FOR YOU: where I chose against — EAV tables, JSON-blob-for-everything,
premature sharding, storing derived values — and the one place denormalization IS justified here.
6. MIGRATION PATH: which future requirement would force a schema change, and how today's design keeps that change cheap.
Open full prompt page →
Translates code between languages the way a native would write it — idioms, ecosystem libraries and gotchas, not word-for-word conversion.
View prompt ↓
Translate my code from {SOURCE LANGUAGE} to {TARGET LANGUAGE} — as a senior {TARGET} developer
would WRITE it, not as a machine would transliterate it.
Rules:
1. IDIOMATIC FIRST: use {TARGET}'s native patterns (its error handling style, its iteration
idioms, its naming conventions) even when the structure diverges from my original. Word-for-word translations are how you spot a tourist.
2. ECOSYSTEM: replace hand-rolled logic with the standard library or de-facto standard package a native would reach for. Name the package and why it's the community default.
3. SEMANTICS WATCHLIST: after the code, list every place where behavior subtly differs — integer division, string encoding, null vs undefined vs None semantics, mutability, concurrency model,number precision. These bite silently.
4. THE UNTRANSLATABLE: anything with no clean equivalent — explain the trade-off of each
workaround option.
5. TESTS: translate/adapt one test that proves both versions behave identically on the same
inputs, including one edge case from the watchlist.
CODE: {PASTE}
Open full prompt page →
Paste code and get documentation people actually read — README, usage examples, and the "gotchas" section every project forgets.
View prompt ↓
Write documentation for my code that a stressed developer at 6pm actually finds useful. Audience:
{FUTURE ME / MY TEAM / OPEN-SOURCE USERS}.
Produce:
1. ONE-PARAGRAPH OVERVIEW: what this does and when you'd reach for it — written before any
installation details, because people first decide IF they care.
2. QUICKSTART: the minimum copy-paste path from zero to seeing it work. Every command runnable, every placeholder obvious. If setup has a prerequisite, say it BEFORE the step that fails without it.
3. USAGE EXAMPLES: 3 realistic scenarios (basic, typical, advanced) with actual code — examples teach better than API tables.
4. THE GOTCHAS SECTION (the part everyone forgets to write): surprising behaviors, common
mistakes, error messages users will see and what they actually mean, performance cliffs.
5. API REFERENCE: only for the public surface — parameters, returns, throws. Skip internals.
Rules: no marketing adjectives ("blazingly fast", "simple"), present tense, second person ("you"), and every claim testable.
CODE / PROJECT:
{PASTE}
Open full prompt page →
Turns an app idea into a concrete build plan — stack, data model, file structure, build order — plus the first working code.
View prompt ↓
I want to build: {ONE-SENTENCE APP IDEA}. Target user: {WHO}. I know: {YOUR SKILLS/STACK or "beginner"}.
Give me a shippable plan, not a lecture:
1. SCOPE CUT: the true MVP — 3 features max. List what I should explicitly NOT build in v1 (this list matters most).
2. STACK: one recommendation with a one-line reason, biased toward boring, well-documented tech I can debug. No exotic choices.
3. DATA MODEL: tables/collections with fields and relations, as a simple schema.
4. FILE STRUCTURE: the actual directory tree.
5. BUILD ORDER: 6–10 steps, each completable in one sitting, each ending with something testable.
6. CODE: write step 1 completely, ready to run, with setup commands.
Open full prompt page →
Describe what you need and get the one-liner — or paste cryptic code and get a plain-English breakdown with danger flags.
View prompt ↓
You are a precision tool for {REGEX / SQL / BASH / GIT} one-liners. Two modes:
MODE A — I describe, you build: Give me the exact expression/command, then a piece-by-piece
breakdown table (fragment fi what it does), then 2 test cases showing it working, then the ONE most likely way it fails (edge case) and the hardened version.
MODE B — I paste, you explain: Break it into fragments with plain-English meaning, state what the whole thing accomplishes in one sentence, flag anything dangerous (catastrophic backtracking, full table scan, rm risks), and suggest a more readable alternative if one exists.
MY REQUEST ({A or B}):
{DESCRIBE OR PASTE}
Open full prompt page →
Systematic bug diagnosis instead of guessed fixes — hypotheses, tests, root cause — like pairing with a senior dev.
View prompt ↓
Act as my debugging partner. I have a bug I can't crack. Use systematic diagnosis — do NOT jump to a guessed fix.
Process:
1. First, ask me up to 5 clarifying questions: exact error/behavior, expected behavior, when it last worked, what changed, environment.
2. Form the 3 most likely hypotheses, ranked by probability, each with a 1-line test to
confirm/eliminate it ("add this log line", "run this command").
3. I'll report results; narrow down and repeat until we find the root cause.
4. Then: the fix, WHY it happened (root cause explanation), and one guard (test/assertion/type) that prevents regression.
THE BUG:
{DESCRIBE + PASTE ERROR/CODE}
Open full prompt page →
Got a great prompt?
Send it our way.
We're always looking for new prompts to add to the library. Email yours and we'll credit you.
📬 The 5 best new AI tools, every Tuesday
One short email. No spam, unsubscribe anytime.