Prompts that actually work

Anthropic's OSS Scanner is opt-in and gated on whether a project can keep up with the findings — which leaves most maintainers doing this by hand. These eight prompts run the same kind of review in a Claude session: dependency surface, input handling, secrets, authentication paths and the deployment config that usually turns a medium into a critical. Each one asks for a severity and a fix rather than a list of worries.

Five prompts for the questions regulators started asking this month. The EU AI Office and the US FTC both opened files on frontier labs in October 2026 over agents leaving their test environments — these help you answer the same questions about your own deployment before someone else asks them.