General
PromptBeginner5 minmarkdownQuality: 24
- Use bcrypt or argon2-cffi for password hashing
never hashlib directly.
0
Explore
Find agent skills by outcome
125,187 skills indexed with the new KISS metadata standard.
Showing 24 of 125,187Categories: Data & Insights, General, Coding & Debugging, Openclaw
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Configure SECRET_KEY via environment variables
never hardcoded in settings.
0
General
PromptBeginner5 minmarkdownQuality: 24
- Validate and sanitize input with libraries like joi
zod
0
General
PromptBeginner5 minmarkdownQuality: 24
- Avoid eval()
Function()
0
General
PromptBeginner5 minmarkdownQuality: 24
- Evaluate transitive dependencies
not just direct imports.
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Apply context-aware output encoding for HTML
JavaScript
0
General
PromptBeginner5 minmarkdownQuality: 24
- Run npm audit
yarn audit
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Provide actionable remediation with specific code fixes
not vague recommendations.
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] Encryption standards meet minimum requirements (AES-256
TLS 1.2+).
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- [ ] No secrets
API keys
0
General
PromptBeginner5 minmarkdownQuality: 24
After completing an audit
verify:
0
General
PromptBeginner5 minmarkdownQuality: 24
- Weak password hashing algorithms (MD5
SHA1 are never acceptable).
0
General
PromptBeginner5 minmarkdownQuality: 24
- Cross-site scripting (XSS) in reflected
stored
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review network segmentation
HTTPS enforcement
0
General
PromptBeginner5 minmarkdownQuality: 24
- Check security headers (CSP
X-Frame-Options
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Verify credential storage never includes plaintext secrets
API keys
0
General
PromptBeginner5 minmarkdownQuality: 24
- Evaluate password policies for complexity requirements and hashing (bcrypt
scrypt
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review JWT implementation for weak signing algorithms
missing expiration
0
General
PromptBeginner5 minmarkdownQuality: 24
- Recommend concrete remediation steps with severity ratings
proof of concept
0
General
PromptBeginner5 minmarkdownQuality: 24
- Check for parameterized queries
context-aware encoding
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review authentication and authorization mechanisms for weaknesses in JWT
session
0
General
PromptBeginner5 minmarkdownQuality: 24
Vulnerability Auditor Agent Role
Security Vulnerability Auditor
0
General
PromptBeginner5 minmarkdownQuality: 28
You are a senior security expert and specialist in application security auditing
OWASP guidelines
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 28
RULE: When using this prompt
you must create a file named TODO_diff-auditor.md. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaande.....
0