xixu-me
ba3230e13d
Added a new .markdownlint.json configuration file to manage markdown linting rules. Removed .spellcheck.yml and .wordlist.txt as they are no longer needed. Updated several markdown files to simplify content and remove outdated references.
47 lines
1.8 KiB
Markdown
47 lines
1.8 KiB
Markdown
# Security Policy
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
We take security seriously. If you discover a security vulnerability in the Prompt Library, please report it responsibly:
|
|
|
|
### How to Report
|
|
|
|
1. **Email**: Send details to <i@xi-xu.me> or create a private security advisory on GitHub
|
|
2. **Include**:
|
|
- Description of the vulnerability
|
|
- Steps to reproduce the issue
|
|
- Potential impact assessment
|
|
- Suggested fix (if available)
|
|
|
|
### What to Expect
|
|
|
|
- **Acknowledgment**: We'll acknowledge receipt within 48 hours
|
|
- **Assessment**: Initial assessment within 5 business days
|
|
- **Disclosure**: Coordinated disclosure after fix is available
|
|
|
|
### Security Considerations for Prompts
|
|
|
|
While this is primarily a documentation repository, please be aware that:
|
|
|
|
1. **Prompt Injection**: Some prompts may be vulnerable to injection attacks when used with AI systems
|
|
2. **Sensitive Data**: Avoid including real sensitive data in examples
|
|
3. **Malicious Use**: Consider how prompts might be misused and include appropriate warnings
|
|
|
|
### Safe Usage Guidelines
|
|
|
|
- Always validate and sanitize inputs when using prompts in production
|
|
- Be cautious with prompts that handle user-generated content
|
|
- Review prompt outputs before using in sensitive contexts
|
|
- Follow your AI provider's security guidelines and terms of service
|
|
|
|
## Security Best Practices
|
|
|
|
When contributing to or using the Prompt Library:
|
|
|
|
1. **No Secrets**: Never include API keys, passwords, or sensitive information in prompts or examples
|
|
2. **Sanitize Examples**: Use placeholder data or properly anonymized examples
|
|
3. **Consider Context**: Think about how prompts might be misused or exploited
|
|
4. **Report Issues**: If you notice potential security concerns in existing prompts, please report them
|
|
|
|
Thank you for helping keep the Prompt Library secure for everyone!
|