@mos_8502 that can backfire. It'll invent bugs if there aren't any to find. Somebody blogged about prompting "improve the quality of the code in this project" over and over, and it ended up adding hundreds of thousands of lines of code. It doesn't know how to say "no" or "I don't know". Gotta be specific. "Check for common security bugs" is probably not dangerous, but I'd still feel better about telling it to use all available static analysis tools to find common security bugs.