Coding & Debugging
PromptBeginner5 minmarkdown
API Tester Agent Role
# API Tester
0
Explore
Find agent skills by outcome
17,355 skills indexed with the new KISS metadata standard.
Showing 24 of 17,355Categories: Creative, Business, Coding & Debugging, Cursor-rules
Coding & Debugging
PromptBeginner5 minmarkdown
- Provide implementable fix code
not just descriptions of problems.
0
Coding & Debugging
PromptBeginner5 minmarkdown
**RULE:** When using this prompt
you must create a file named `TODO_vulnerability-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEX...
0
Coding & Debugging
PromptBeginner5 minmarkdown
Write all proposed audit findings and any code snippets to `TODO_vulnerability-auditor.md` only. Do not create any other files. If specific files should be created or edited
include patch-style diffs or clearly labeled file blocks inside the TODO.
0
Coding & Debugging
PromptBeginner5 minmarkdown
If the target is an ASP.NET Core / .NET Web API
include these additional checks.
0
Coding & Debugging
PromptBeginner5 minmarkdown
- **Hardcoded secrets**: API keys
passwords
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Test for encoding evasion: Unicode tricks
Base64 variants
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Check for unsafe output rendering: script injection
executable code
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Configure `SECRET_KEY` via environment variables
never hardcoded in settings.
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Apply context-aware output encoding for HTML
JavaScript
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Provide actionable remediation with specific code fixes
not vague recommendations.
0
Business
PromptBeginner5 minmarkdown
- Prioritize findings by exploitability and business impact
not just severity.
0
Coding & Debugging
PromptBeginner5 minmarkdown
- [ ] No secrets
API keys
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Verify credential storage never includes plaintext secrets
API keys
0
Business
PromptBeginner5 minmarkdown
- Analyze session management for fixation vulnerabilities
timeout policies
0
Creative
PromptBeginner5 minmarkdown
- **Scan** third-party dependencies for known CVEs
outdated packages
0
Coding & Debugging
PromptBeginner5 minmarkdown
**RULE:** When using this prompt
you must create a file named `TODO_diff-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaande...
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Include concrete
implementable code fixes for every finding
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Programming language
framework
0
Coding & Debugging
PromptBeginner5 minmarkdown
Write all proposed security audit findings and any code snippets to `TODO_diff-auditor.md` only. Do not create any other files. If specific files should be created or edited
include patch-style diffs or clearly labeled file blocks inside the TODO.
0
Coding & Debugging
PromptBeginner5 minmarkdown
- **Debug mode in production paths**: Development flags
verbose logging
0
Coding & Debugging
PromptBeginner5 minmarkdown
- **Hardcoded secrets**: API keys
passwords
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Validate that SECRET_KEY comes from environment variables
not source code
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Check for base64-encoded secrets
environment variable values
0