Home/ Part XV — Troubleshooting, Checklists, and Reference/46. Vibe Coding Checklists/46.5 Security checklist (prompt injection, secrets, access control)

46.5 Security checklist (prompt injection, secrets, access control)

Overview and links for this section of the guide.

On this page

Prompt Injection

  • [ ] Do we treat user input as untrusted?
  • [ ] Do we use "delimiter sandboxing"?
  • [ ] Do we have a separate "system instructions" layer?

Data Safety

  • [ ] Is PII stripped?
  • [ ] Does the model provider train on our data? (Check the TOS).

Where to go next