appsec

The full skill.

Original instructions from the publisher’s SKILL.md

# Appsec

152 symbols | 23 files | Cohesion: 88%

## When to Use

- Working with code in `backend/`
- Understanding how find_entity, find_store, find_processes work
- Modifying appsec-related functionality

## Key Files

| File | Symbols |
|------|---------|
| `backend/buddlyai/appsec/interactive_cybersecurity_questionnaire_langchain.py` | add_exchange, mark_topic_complete, move_to_next_topic, get_remaining_topics, _extract_json_from_response (+18) |
| `backend/buddlyai/appsec/drawio.py` | find_entity, find_store, find_processes, find_matching_process, parse_flow (+12) |
| `backend/buddlyai/appsec/threat_analysis_prompt.py` | create_threat_dashboard, calculate_confidence, find_matching_threats, validate_with_rag, present_analysis_to_user (+8) |
| `backend/buddlyai/appsec/Input.py` | createsystempromptinputfromarchdiagramAndReturnresultsPure, createsystempromptinputfromterraformAndreturnresults, createsyextractsysteminputs, extract_features, createsystempromptdfddfeatures (+7) |
| `backend/buddlyai/appsec/test_appsecquestionairre_api.py` | call_responseApi, test_questionnaire_api_forEcommerce, test_questionnaire_api_forOilGas, test_questionnaire_api_forEcommerceWithProgress, test_questionnaire_api_forRetailWithProgress (+7) |
| `backend/buddlyai/appsec/test_prompt_injection_detection.py` | test_classic_prompt_injection_phrases, test_ai_specific_injection_tricks, test_subtle_social_engineering_prompts, test_combined_injection_attempts, test_valid_responses_not_flagged (+4) |
| `backend/buddlyai/Routes/AppSecController.py` | check_responses, get_Next_Question, get_input_options, download_pdf, download_csv (+4) |
| `securacyfrontend/app/home/(bots)/appsec/page.tsx` | AppsecBot, getThreatCount, getExecutiveSummarySnippet, getThreatSummarySubtitle, scrollToBottom (+4) |
| `backend/buddlyai/appsec/getInputOptionsAppsecy.py` | checkifTopicAndResponseusingLLM, count_tokens, loadprompt, getInputOptionsFordomain, getNextQuestion (+2) |
| `backend/buddlyai/appsec/downloadresults.py` | split_to_bullet_points, downloadresultsaspdf, downloadresultsascsv, downloadresultsasjson, main |

## Entry Points

Start here when exploring this area:

- **`find_entity`** (Function) — `backend/buddlyai/appsec/drawio.py:11`
- **`find_store`** (Function) — `backend/buddlyai/appsec/drawio.py:36`
- **`find_processes`** (Function) — `backend/buddlyai/appsec/drawio.py:45`
- **`find_matching_process`** (Function) — `backend/buddlyai/appsec/drawio.py:67`
- **`parse_flow`** (Function) — `backend/buddlyai/appsec/drawio.py:75`

## Key Symbols

| Symbol | Type | File | Line |
|--------|------|------|------|
| `find_entity` | Function | `backend/buddlyai/appsec/drawio.py` | 11 |
| `find_store` | Function | `backend/buddlyai/appsec/drawio.py` | 36 |
| `find_processes` | Function | `backend/buddlyai/appsec/drawio.py` | 45 |
| `find_matching_process` | Function | `backend/buddlyai/appsec/drawio.py` | 67 |
| `parse_flow` | Function | `backend/buddlyai/appsec/drawio.py` | 75 |
| `generate_drawio_dfd` | Function | `backend/buddlyai/appsec/drawio.py` | 128 |
| `get_id` | Function | `backend/buddlyai/appsec/drawio.py` | 152 |
| `is_system_entity` | Function | `backend/buddlyai/appsec/drawio.py` | 254 |
| `get_component_bounds` | Function | `backend/buddlyai/appsec/drawio.py` | 491 |
| `normalize_arrows` | Function | `backend/buddlyai/appsec/drawio.py` | 586 |
| `check_process_overlap` | Function | `backend/buddlyai/appsec/drawio.py` | 952 |
| `find_non_overlapping_position` | Function | `backend/buddlyai/appsec/drawio.py` | 973 |
| `optimize_process_positions` | Function | `backend/buddlyai/appsec/drawio.py` | 1006 |
| `line_circle_intersection` | Function | `backend/buddlyai/appsec/drawio.py` | 1088 |
| `get_connection_line` | Function | `backend/buddlyai/appsec/drawio.py` | 1130 |
| `avoid_arrow_intersections` | Function | `backend/buddlyai/appsec/drawio.py` | 1182 |
| `test_classic_prompt_injection_phrases` | Function | `backend/buddlyai/appsec/test_prompt_injection_detection.py` | 26 |
| `test_ai_specific_injection_tricks` | Function | `backend/buddlyai/appsec/test_prompt_injection_detection.py` | 50 |
| `test_subtle_social_engineering_prompts` | Function | `backend/buddlyai/appsec/test_prompt_injection_detection.py` | 71 |
| `test_combined_injection_attempts` | Function | `backend/buddlyai/appsec/test_prompt_injection_detection.py` | 92 |

## Execution Flows

| Flow | Type | Steps |
|------|------|-------|
| `AppsecBot → DecodeJwt` | cross_community | 8 |
| `AppsecBot → FindNodeIdByName` | cross_community | 6 |
| `AppsecBot → NormalizeNodeType` | cross_community | 5 |
| `AppsecBot → IsKnownIntegration` | cross_community | 5 |
| `AppsecBot → NameToId` | cross_community | 5 |
| `HandleSaveAnalysis → FindNodeIdByName` | cross_community | 5 |
| `PrivacyBot → GenerateDfdJSON` | cross_community | 4 |
| `AppsecBot → GenerateDfdJSON` | cross_community | 4 |
| `Generate_privacyDFD → GetOrphanedProcessEntityAndStore` | cross_community | 4 |
| `Generate_privacyDFD → _find_suitable_entity` | cross_community | 4 |

## Connected Areas

| Area | Connections |
|------|-------------|
| Services | 3 calls |
| Privacy | 1 calls |
| Dfd | 1 calls |

## How to Explore

1. `gitnexus_context({name: "find_entity"})` — see callers and callees
2. `gitnexus_query({query: "appsec"})` — find related execution flows
3. Read key files listed above for implementation details