General
PromptBeginner5 minmarkdown
- Authentication weaknesses: token leakage
missing expiration
0
Explore
Find agent skills by outcome
85,198 skills indexed with the new KISS metadata standard.
Showing 24 of 85,198Categories: Data & Insights, General, Communication
General
PromptBeginner5 minmarkdown
- **Error Rates**: 5xx errors <0.1%
4xx errors <5% (excluding 401/403)
0
General
PromptBeginner5 minmarkdown
- **Response Time**: Simple GET <100ms (p95)
complex query <500ms (p95)
0
General
PromptBeginner5 minmarkdown
- Configure meaningful alerts based on SLI/SLO thresholds (e.g.
p95 latency > 500ms
0
General
PromptBeginner5 minmarkdown
- Test proper error propagation: errors are meaningful
not swallowed or leaked as 500s
0
General
PromptBeginner5 minmarkdown
- Identify resource bottlenecks (CPU
memory
0
General
PromptBeginner5 minmarkdown
- Profile endpoint response times at baseline load
capturing p50
0
General
PromptBeginner5 minmarkdown
- **Execute load and stress tests** by simulating realistic user behavior
gradually increasing load to find breaking points
0
General
PromptBeginner5 minmarkdown
- **Profile endpoint performance** by measuring response times under various loads
identifying N+1 queries
0
General
PromptBeginner5 minmarkdown
- Examine what controls are absent
not just what is present.
0
General
PromptBeginner5 minmarkdown
- [ ] Remediation steps are specific and implementable
not generic advice.
0
General
PromptBeginner5 minmarkdown
- [ ] Findings include severity
description
0
General
PromptBeginner5 minmarkdown
Before finalizing
verify:
0
General
PromptBeginner5 minmarkdown
- Compliance standards applicable to the project (OWASP
PCI DSS
0
General
PromptBeginner5 minmarkdown
- **Priority**: Critical
high
0
General
PromptBeginner5 minmarkdown
- The scope of the audit (full application
specific module
0
General
PromptBeginner5 minmarkdown
In `TODO_vulnerability-auditor.md`
include:
0
General
PromptBeginner5 minmarkdown
- **HTTP Hardening**: HTTPS redirection
HSTS
0
General
PromptBeginner5 minmarkdown
- **NuGet Supply Chain**: Dependency scanning
pinned versions
0
General
PromptBeginner5 minmarkdown
- **Auth Schemes**: Correct JWT/cookie/OAuth configuration
token validation
0
General
PromptBeginner5 minmarkdown
- **Weak cryptography**: Use of MD5
SHA1
0
General
PromptBeginner5 minmarkdown
- Review log collection
centralization
0
General
PromptBeginner5 minmarkdown
- Review access logging
audit trails
0
General
PromptBeginner5 minmarkdown
- Assess resource limits
quotas
0