Explore

Find agent skills by outcome

17,057 skills indexed with the new KISS metadata standard.

Showing 24 of 17,057Categories: Coding & Debugging, Data, Business

Coding & Debugging

PromptBeginner5 minmarkdownQuality: 24

API Tester Agent Role

# API Tester

May 11, 2026

Coding & Debugging

PromptBeginner5 minmarkdownQuality: 28

RULE: When using this prompt

you must create a file named `TODO_vulnerability-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEX...

Find agent skills by outcome

API Tester Agent Role

**RULE:** When using this prompt

- Provide implementable fix code

- **Impact**: Business impact

Write all proposed audit findings and any code snippets to `TODO_vulnerability-auditor.md` only. Do not create any other files. If specific files should be created or edited

- **ORM Safety**: Parameterized queries

- **Model Validation**: DataAnnotations

If the target is an ASP.NET Core / .NET Web API

- **Unencrypted sensitive data**: PII

- **Verbose error messages**: Stack traces

- **Hardcoded secrets**: API keys

- Test for encoding evasion: Unicode tricks

- Check for unsafe output rendering: script injection

- Configure `SECRET_KEY` via environment variables

- Apply context-aware output encoding for HTML

- Provide actionable remediation with specific code fixes

- Prioritize findings by exploitability and business impact

- [ ] No secrets

- Missing data masking in logs

- Validate that sensitive data never appears in logs

- Assess PII handling for data minimization

- Verify credential storage never includes plaintext secrets

- Analyze session management for fixation vulnerabilities

- Examine all user inputs for injection vectors: SQL

RULE: When using this prompt

- Impact: Business impact

- ORM Safety: Parameterized queries

- Model Validation: DataAnnotations

- Unencrypted sensitive data: PII

- Verbose error messages: Stack traces

- Hardcoded secrets: API keys