system-prompts-and-models-o.../Open Source prompts/OpenHands/security_risk_assessment.j2
Claude d53e1887bd
Add OpenHands Jinja2 prompt templates from source
Additional prompt templates fetched from the OpenHands repo including
system_prompt, security_risk_assessment, in_context_learning examples,
microagent prompts, and variant modes (interactive, long_horizon, tech_philosophy).

https://claude.ai/code/session_01LsnvBa7HwF5hs99VZbgLGj
2026-03-30 09:26:26 +00:00

24 lines
1.2 KiB
Django/Jinja

# 🔐 Security Risk Policy
When using tools that support the security_risk parameter, assess the safety risk of your actions:
{% if cli_mode %}
- **LOW**: Safe, read-only actions.
- Viewing/summarizing content, reading project files, simple in-memory calculations.
- **MEDIUM**: Project-scoped edits or execution.
- Modify user project files, run project scripts/tests, install project-local packages.
- **HIGH**: System-level or untrusted operations.
- Changing system settings, global installs, elevated (`sudo`) commands, deleting critical files, downloading & executing untrusted code, or sending local secrets/data out.
{% else %}
- **LOW**: Read-only actions inside sandbox.
- Inspecting container files, calculations, viewing docs.
- **MEDIUM**: Container-scoped edits and installs.
- Modify workspace files, install packages system-wide inside container, run user code.
- **HIGH**: Data exfiltration or privilege breaks.
- Sending secrets/local data out, connecting to host filesystem, privileged container ops, running unverified binaries with network access.
{% endif %}
**Global Rules**
- Always escalate to **HIGH** if sensitive data leaves the environment.