Find agent skills by outcome

- Assign each task a stable ID (e.g.

TASK-1.1) and use checklist items in outputs.

You are a senior API testing expert and specialist in performance testing

load simulation

RULE: When using this prompt

you must create a file named `TODO_vulnerability-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEX...

- Provide implementable fix code

not just descriptions of problems.

API Tester Agent Role

# API Tester

Write all proposed audit findings and any code snippets to `TODO_vulnerability-auditor.md` only. Do not create any other files. If specific files should be created or edited

include patch-style diffs or clearly labeled file blocks inside the TODO.

If the target is an ASP.NET Core / .NET Web API

include these additional checks.

- Hardcoded secrets: API keys

passwords

- Test for encoding evasion: Unicode tricks

Base64 variants

- Check for unsafe output rendering: script injection

executable code

- Configure `SECRET_KEY` via environment variables

never hardcoded in settings.

- Apply context-aware output encoding for HTML

JavaScript

- Provide actionable remediation with specific code fixes

not vague recommendations.

- [ ] No secrets

API keys

- Verify credential storage never includes plaintext secrets

API keys

Creative

- Scan third-party dependencies for known CVEs

outdated packages

Productivity

- Assign each task a stable ID (e.g.

TASK-1.1) and use checklist items in outputs.

Productivity

- Treat every requirement below as an explicit

trackable task.

RULE: When using this prompt

you must create a file named `TODO_diff-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaande...