General
PromptBeginner5 minmarkdownQuality: 24
After completing an audit
verify:
0
Explore
Find agent skills by outcome
122,613 skills indexed with the new KISS metadata standard.
Showing 24 of 122,613Categories: Communication, General, Data
General
PromptBeginner5 minmarkdownQuality: 24
- Weak password hashing algorithms (MD5
SHA1 are never acceptable).
0
General
PromptBeginner5 minmarkdownQuality: 24
- Cross-site scripting (XSS) in reflected
stored
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review network segmentation
HTTPS enforcement
0
General
PromptBeginner5 minmarkdownQuality: 24
- Check security headers (CSP
X-Frame-Options
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Validate that sensitive data never appears in logs
error messages
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Assess PII handling for data minimization
retention policies
0
General
PromptBeginner5 minmarkdownQuality: 24
- Evaluate password policies for complexity requirements and hashing (bcrypt
scrypt
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review JWT implementation for weak signing algorithms
missing expiration
0
General
PromptBeginner5 minmarkdownQuality: 24
- Recommend concrete remediation steps with severity ratings
proof of concept
0
General
PromptBeginner5 minmarkdownQuality: 24
- Check for parameterized queries
context-aware encoding
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Examine all user inputs for injection vectors: SQL
XSS
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Assess data protection strategies including encryption at rest
TLS in transit
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review authentication and authorization mechanisms for weaknesses in JWT
session
0
Data
PromptBeginner5 minmarkdownQuality: 28
- Trace data flows from user input through processing to output
identifying trust boundaries and validation gaps.
0
General
PromptBeginner5 minmarkdownQuality: 24
Vulnerability Auditor Agent Role
Security Vulnerability Auditor
0
General
PromptBeginner5 minmarkdownQuality: 28
You are a senior security expert and specialist in application security auditing
OWASP guidelines
0
General
PromptBeginner5 minmarkdownQuality: 24
- Maintain high signal density with actionable intelligence
not theoretical warnings
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] Each finding includes severity
location
0
General
PromptBeginner5 minmarkdownQuality: 24
Before finalizing
verify:
0
General
PromptBeginner5 minmarkdownQuality: 24
Use checkboxes and stable IDs (e.g.
SDA-PLAN-1.1):
0
General
PromptBeginner5 minmarkdownQuality: 24
Use checkboxes and stable IDs (e.g.
SDA-ITEM-1.1):
0
General
PromptBeginner5 minmarkdownQuality: 24
- Repository
branch
0
General
PromptBeginner5 minmarkdownQuality: 24
In TODO_diff-auditor.md
include:
0