- Authentication weaknesses: token leakage
missing expiration
Explore
120,534 skills indexed with the new KISS metadata standard.
missing expiration
or retries without backoff causing retry storms
4xx errors <5% (excluding 401/403)
write-heavy APIs >100 RPS per instance
memory stable without unbounded growth
p95 latency > 500ms
complex query <500ms (p95)
error rate
not swallowed or leaked as 500s
structured error bodies
memory
spike test (10x sudden increase)
capturing p50
performance dashboards
gradually increasing load to find breaking points
identifying N+1 queries
testing backward compatibility
load simulation
you must create a file named `TODO_vulnerability-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEX...
# API Tester
not just descriptions of problems.
not generic advice.
not just what is present.
description