Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
YouTube Security VideosIntel Devs: Smart AI Edge Solutions - 0 Introduction | Intel Software(22.09.2026 um 23:48 Uhr)
Windows Tipps & SecurityGoogles gibt Chrome 154 frei und schließt über 100 Lücken(23.09.2026 um 09:11 Uhr)
Windows Tipps & SecurityKlangerlebnis & Sicherheit im Vonovia Ruhrstadion(23.09.2026 um 08:45 Uhr)
Unix & Linux ServerLocal AI Jargon Quiz: Do You Know All These Buzzwords?(23.09.2026 um 08:38 Uhr)
Sichere ProgrammierungNeu von AWS: Weniger Kontextpflege für selbst gebaute KI-Agenten(23.09.2026 um 09:52 Uhr)
Sichere ProgrammierungLINQ GroupBy: The Operator Everyone Uses Wrong(23.09.2026 um 09:41 Uhr)
Sichere ProgrammierungIT Heard About the Acquisition Nine Days Before It Closed(23.09.2026 um 09:45 Uhr)
YouTube Security VideosIntel Devs: Smart AI Edge Solutions - 0 Introduction | Intel Software(22.09.2026 um 23:48 Uhr)
Windows Tipps & SecurityGoogles gibt Chrome 154 frei und schließt über 100 Lücken(23.09.2026 um 09:11 Uhr)
Windows Tipps & SecurityKlangerlebnis & Sicherheit im Vonovia Ruhrstadion(23.09.2026 um 08:45 Uhr)
Unix & Linux ServerLocal AI Jargon Quiz: Do You Know All These Buzzwords?(23.09.2026 um 08:38 Uhr)
Sichere ProgrammierungNeu von AWS: Weniger Kontextpflege für selbst gebaute KI-Agenten(23.09.2026 um 09:52 Uhr)
Sichere ProgrammierungLINQ GroupBy: The Operator Everyone Uses Wrong(23.09.2026 um 09:41 Uhr)
Sichere ProgrammierungIT Heard About the Acquisition Nine Days Before It Closed(23.09.2026 um 09:45 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Prompt Engineering: The Art of Talking to Robots

The Prompt Whisperer's Guide (You, after reading this article) You've learned what LLMs are and how they work. Now comes the actual skill: making them do what you want. This is harder than it sounds. LLMs are like that one coworker…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




The Prompt Whisperer's Guide



Prompt Whisperer

(You, after reading this article)



You've learned what LLMs are and how they work. Now comes the actual skill: making them do what you want.



This is harder than it sounds. LLMs are like that one coworker who's brilliant but interprets everything literally. Say "make it better" and they'll add sparkles. Say "fix the bug" and they'll delete the file.



Let's learn how to communicate properly.





The Anatomy of a Good Prompt



Every effective prompt has these components:




[ROLE] Who should the AI pretend to be?
[CONTEXT] What does it need to know?
[TASK] What should it actually do?
[FORMAT] How should the output look?
[CONSTRAINTS] What should it avoid?









The Bad Prompt






Write me some code for a login page.






Why it sucks: No context, no constraints, no format. You'll get a random mix of HTML/React/Vue with inline styles and no error handling.






The Good Prompt






You are a senior frontend developer specializing in React and TypeScript.

Context: I'm building a B2B SaaS dashboard. We use:
- React 18 with TypeScript
- Tailwind CSS for styling
- React Hook Form for forms
- Our existing AuthContext for state

Task: Create a login page component with email and password fields.

Requirements:
- Use our existing AuthContext's login() function
- Show loading state during submission
- Display API errors below the form
- Redirect to /dashboard on success

Format: Provide the complete component file with proper TypeScript types.






Why it works: Clear role, specific context, defined requirements, expected format.



Good vs Bad Prompt

(The difference is night and day)





The RICE Framework



When your prompts aren't working, use RICE:

































Letter Meaning Question to Ask
R Role Who is the AI being?
I Instructions What exactly should it do?
C Context What background info does it need?
E Examples Can I show what I want?




Examples Are Overpowered



Nothing beats a good example. LLMs are pattern-matching machines—show them the pattern.




Convert these sentences to the passive voice.

Example:
- Input: "The cat ate the fish."
- Output: "The fish was eaten by the cat."

Now convert:
- "The developer wrote the code."
- "The manager approved the request."






This works 10x better than explaining grammatical rules.






Advanced Techniques






1. Chain of Thought (CoT)



Chain of Thought

(Step by step, like a robot learning to dance)



For complex reasoning, tell the model to think step by step:




Solve this problem. Think through it step by step before giving your final answer.

Problem: A store has 3 types of items. Type A costs $5, Type B costs $8,
Type C costs $12. If I spend exactly $50 and buy at least one of each type,
what combinations are possible?






Without "step by step," models often jump to wrong conclusions. With it, they show their work and catch errors.






2. Few-Shot Prompting



Give 2-3 examples before your actual request:




Classify the sentiment of these reviews:

Review: "This product changed my life! Best purchase ever!"
Sentiment: Positive

Review: "Arrived broken. Customer service was unhelpful."
Sentiment: Negative

Review: "It's okay. Does what it says, nothing special."
Sentiment: Neutral

Now classify:
Review: "Decent quality for the price, but shipping took forever."
Sentiment:









3. Self-Consistency



For critical tasks, ask the model to solve the problem multiple ways and check if answers agree:




Solve this problem using two different approaches. 
If your answers differ, explain which one is correct and why.









4. Role Stacking



Combine perspectives for better output:




You are three experts collaborating:
1. A security engineer who spots vulnerabilities
2. A UX designer who ensures usability
3. A performance engineer who optimizes speed

Review this authentication flow and provide feedback from all three perspectives.









Common Mistakes (And Fixes)






❌ Mistake 1: Being Too Vague






Make it better.






Fix: Be specific about what "better" means.




Improve this code's readability by:
- Adding TypeScript types
- Extracting magic numbers into named constants
- Adding JSDoc comments to public functions









❌ Mistake 2: Assuming Context






Why isn't this working?
[pastes 500 lines of code]






Fix: Explain the expected vs actual behavior.




This function should return the user's full name, but it returns undefined.
Expected: "John Doe"
Actual: undefined

Here's the relevant code:
[paste only the relevant 20 lines]









❌ Mistake 3: Forgetting Format






Give me some API endpoints for a todo app.






Fix: Specify the output format.




Design REST API endpoints for a todo app.

Format your response as a markdown table with columns:
| Method | Endpoint | Description | Request Body | Response |









❌ Mistake 4: No Escape Hatch






Analyze this data and provide insights.






Fix: Tell it what to do when uncertain.




Analyze this data and provide insights.
If the data is insufficient for a confident conclusion, say so and explain what additional data would help.









The Prompt Template Library



Here are battle-tested templates for common tasks:






Code Review






Review this [LANGUAGE] code as a senior developer. Focus on:
1. Bugs or potential runtime errors
2. Security vulnerabilities
3. Performance issues
4. Readability improvements

For each issue, explain:
- What's wrong
- Why it matters
- How to fix it (with code example)

Code:
[YOUR CODE]









Explanation






Explain [CONCEPT] to me as if I'm a [SKILL LEVEL] developer.

Use:
- Simple analogies
- Practical examples
- Code snippets where helpful

Avoid:
- Jargon without explanation
- Overly academic language









Debugging






I have a bug in my [LANGUAGE] code.

Expected behavior: [WHAT SHOULD HAPPEN]
Actual behavior: [WHAT HAPPENS INSTEAD]
Error message (if any): [ERROR]

Relevant code:
[CODE SNIPPET]

What I've tried:
[LIST ATTEMPTS]

Help me identify the root cause and fix it.









The Meta-Prompt: Asking AI to Write Prompts



Here's a cheat code—ask the AI to help you write better prompts:




I want to use an LLM to [YOUR GOAL].

Help me create an effective prompt by:
1. Asking clarifying questions about my requirements
2. Suggesting an appropriate role for the AI
3. Identifying context the AI might need
4. Proposing a clear output format






Then iterate. Good prompts are rarely written on the first try.









🤓 For Nerds: Why Prompts Work (The Math-ish Version)



Let's peek under the hood at why these techniques actually work.






Temperature and Prompt Specificity



LLMs generate tokens by sampling from a probability distribution. Temperature controls how "creative" (random) this sampling is.



$$

P(token_i) = \frac{e^{z_i / T}}{\sum_j e^{z_j / T}}

$$



Where:





  • z_i is the raw score (logit) for token i


  • T is temperature

  • Lower T → more deterministic (picks highest probability)

  • Higher T → more random (flatter distribution)



Why specificity matters: A vague prompt creates a flat distribution—many tokens are roughly equally likely. A specific prompt concentrates probability on the "right" tokens.






In-Context Learning



When you provide examples (few-shot prompting), you're essentially updating the model's behavior without changing its weights. The attention mechanism allows the model to:




  1. Encode your examples as key-value pairs

  2. Use your query as the key

  3. Retrieve the relevant "pattern" from examples



This is why example format matters so much—the model literally pattern-matches against your examples.






Chain of Thought Works Because of Autoregression



LLMs generate tokens one at a time, conditioning on all previous tokens:



$$

P(output) = \prod_{i=1}^{n} P(token_i | token_1, ..., token_{i-1})

$$



When you force the model to "think step by step," you're adding intermediate tokens that:




  1. Break down the problem

  2. Become conditioning context for later tokens

  3. Make the "right answer" token more probable



Without CoT, the model tries to jump directly from question to answer—skipping reasoning that might have corrected errors.






Role Prompting and the Embedding Space



When you say "You are a senior security engineer," you're biasing the model's hidden states toward a region of embedding space associated with:




  • Security terminology

  • Cautious/defensive thinking

  • Technical precision



The first few tokens heavily influence the trajectory through the model's latent space. A good role prompt puts you on the right "track."






Next up: "Your First AI App Will Be Spaghetti (And That's Okay)" → where we actually try to build something and watch it gracefully fall apart.

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Prompt Engineering: The Art of Talking to Robots

Thematisch verwandte Begriffe: Prompt, Engineering, Talking, Robots · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96258 | A vulnerability has been found in onSite internet GmbH Auktion NG Auktio…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick