Explore

Find agent skills by outcome

95,793 skills indexed with the new KISS metadata standard.

Showing 24 of 95,793Categories: Data & Insights, Cursor-rules, General, Research & Learning, Coding & Debugging

Coding & Debugging

PromptBeginner5 minmarkdown

API Tester Agent Role

# API Tester

Mar 25, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

RULE: When using this prompt

you must create a file named `TODO_vulnerability-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEX...

Find agent skills by outcome

API Tester Agent Role

**RULE:** When using this prompt

- Provide implementable fix code

- Examine what controls are absent

- [ ] Remediation steps are specific and implementable

Before finalizing

- [ ] Findings include severity

- Compliance standards applicable to the project (OWASP

- The scope of the audit (full application

- **Priority**: Critical

In `TODO_vulnerability-auditor.md`

Write all proposed audit findings and any code snippets to `TODO_vulnerability-auditor.md` only. Do not create any other files. If specific files should be created or edited

- **NuGet Supply Chain**: Dependency scanning

- **HTTP Hardening**: HTTPS redirection

- **Auth Schemes**: Correct JWT/cookie/OAuth configuration

If the target is an ASP.NET Core / .NET Web API

- **Weak cryptography**: Use of MD5

- **Hardcoded secrets**: API keys

- Review log collection

- Review access logging

- Assess resource limits

- Test for encoding evasion: Unicode tricks

- Check for unsafe output rendering: script injection

- Audit for sensitive information leakage: secrets

RULE: When using this prompt

- Priority: Critical

- NuGet Supply Chain: Dependency scanning

- HTTP Hardening: HTTPS redirection

- Auth Schemes: Correct JWT/cookie/OAuth configuration

- Weak cryptography: Use of MD5

- Hardcoded secrets: API keys