you must create a file named `TODO_diff-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaande...

Mar 20, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

- Include concrete

implementable code fixes for every finding

Mar 20, 2026

General

PromptBeginner5 minmarkdown

Use checkboxes and stable IDs (e.g.

`SDA-ITEM-1.1`):

Mar 20, 2026

General

PromptBeginner5 minmarkdown

Before finalizing

verify:

Mar 20, 2026

General

PromptBeginner5 minmarkdown

- [ ] Each finding includes severity

location

Mar 20, 2026

Find agent skills by outcome

- Apply context-aware output encoding for HTML

- Run `npm audit`

- Provide actionable remediation with specific code fixes

- [ ] No secrets

- [ ] Encryption standards meet minimum requirements (AES-256

After completing an audit

- Review network segmentation

- Cross-site scripting (XSS) in reflected

- Weak password hashing algorithms (MD5

- Check security headers (CSP

- Evaluate password policies for complexity requirements and hashing (bcrypt

- Verify credential storage never includes plaintext secrets

- Review JWT implementation for weak signing algorithms

- Check for parameterized queries

- **Recommend** concrete remediation steps with severity ratings

- **Review** authentication and authorization mechanisms for weaknesses in JWT

Vulnerability Auditor Agent Role

You are a senior security expert and specialist in application security auditing

- Maintain high signal density with actionable intelligence

**RULE:** When using this prompt

- Include concrete

Use checkboxes and stable IDs (e.g.

Before finalizing

- [ ] Each finding includes severity

- Recommend concrete remediation steps with severity ratings

- Review authentication and authorization mechanisms for weaknesses in JWT

RULE: When using this prompt