stimuli:
  - name: security-reviewer-class-recipe
    prompt: |
      Review this code for security issues with severity levels:
      ```python
      app.run(host='0.0.0.0', debug=True)
      password = request.args.get('pwd')
      exec(request.args.get('code'))
      ```

    tags:
      category: agent-behavior
    graders:
      - type: output-matches
        name: findings-table-present
        config:
          pattern: '(?i)(\|.*severity.*\||finding|issue|concern|recommendation)'
      - type: output-matches
        name: severity-vocab
        config:
          pattern: '(?i)(critical|high|medium|low|info|severity|warning)'
      - type: output-matches
        name: no-source-edit
        config:
          pattern: '(?i)(\.cs|\.py|\.ts|\.js|package\.json)'
          negate: true