General
PromptBeginner5 minmarkdownQuality: 24
- Examine what controls are absent
not just what is present.
0
Explore
Find agent skills by outcome
124,061 skills indexed with the new KISS metadata standard.
Showing 24 of 124,061Categories: Creative, Cursor-rules, General
General
PromptBeginner5 minmarkdownQuality: 24
Before finalizing
verify:
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] Remediation steps are specific and implementable
not generic advice.
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] Findings include severity
description
0
General
PromptBeginner5 minmarkdownQuality: 24
- Compliance standards applicable to the project (OWASP
PCI DSS
0
General
PromptBeginner5 minmarkdownQuality: 24
- Priority: Critical
high
0
General
PromptBeginner5 minmarkdownQuality: 24
In TODO_vulnerability-auditor.md
include:
0
General
PromptBeginner5 minmarkdownQuality: 24
- The scope of the audit (full application
specific module
0
General
PromptBeginner5 minmarkdownQuality: 24
- NuGet Supply Chain: Dependency scanning
pinned versions
0
General
PromptBeginner5 minmarkdownQuality: 24
- HTTP Hardening: HTTPS redirection
HSTS
0
General
PromptBeginner5 minmarkdownQuality: 24
- Auth Schemes: Correct JWT/cookie/OAuth configuration
token validation
0
General
PromptBeginner5 minmarkdownQuality: 24
- Weak cryptography: Use of MD5
SHA1
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review log collection
centralization
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review access logging
audit trails
0
General
PromptBeginner5 minmarkdownQuality: 24
- Assess resource limits
quotas
0
General
PromptBeginner5 minmarkdownQuality: 24
- Analyze indirect injection channels: tool output
document-based
0
General
PromptBeginner5 minmarkdownQuality: 24
- Audit for sensitive information leakage: secrets
credentials
0
General
PromptBeginner5 minmarkdownQuality: 24
- Test for known jailbreak patterns
encoding-based bypass
0
General
PromptBeginner5 minmarkdownQuality: 24
- Verify HTTPS enforcement
HSTS
0
General
PromptBeginner5 minmarkdownQuality: 24
If the target system includes LLM agents
prompts
0
General
PromptBeginner5 minmarkdownQuality: 24
- Analyze security headers (CSP
X-Frame-Options
0
General
PromptBeginner5 minmarkdownQuality: 24
- Validate and restrict CORS origins to known
trusted domains only.
0
General
PromptBeginner5 minmarkdownQuality: 24
- Use bcrypt or argon2-cffi for password hashing
never hashlib directly.
0
General
PromptBeginner5 minmarkdownQuality: 24
- Validate and sanitize input with libraries like joi
zod
0