Coding & Debugging
PromptBeginner5 minmarkdown
API Tester Agent Role
# API Tester
0
Explore
Find agent skills by outcome
118,909 skills indexed with the new KISS metadata standard.
Showing 24 of 118,909Categories: Cursor-rules, Coding & Debugging, Openclaw, General, Data
Coding & Debugging
PromptBeginner5 minmarkdown
**RULE:** When using this prompt
you must create a file named `TODO_vulnerability-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEX...
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Provide implementable fix code
not just descriptions of problems.
0
General
PromptBeginner5 minmarkdown
- Examine what controls are absent
not just what is present.
0
General
PromptBeginner5 minmarkdown
- [ ] Findings include severity
description
0
General
PromptBeginner5 minmarkdown
- [ ] Remediation steps are specific and implementable
not generic advice.
0
General
PromptBeginner5 minmarkdown
Before finalizing
verify:
0
Data
PromptBeginner5 minmarkdown
- **Impact**: Business impact
data exposure risk
0
General
PromptBeginner5 minmarkdown
- **Priority**: Critical
high
0
General
PromptBeginner5 minmarkdown
- Compliance standards applicable to the project (OWASP
PCI DSS
0
General
PromptBeginner5 minmarkdown
- The scope of the audit (full application
specific module
0
General
PromptBeginner5 minmarkdown
In `TODO_vulnerability-auditor.md`
include:
0
Coding & Debugging
PromptBeginner5 minmarkdown
Write all proposed audit findings and any code snippets to `TODO_vulnerability-auditor.md` only. Do not create any other files. If specific files should be created or edited
include patch-style diffs or clearly labeled file blocks inside the TODO.
0
General
PromptBeginner5 minmarkdown
- **HTTP Hardening**: HTTPS redirection
HSTS
0
General
PromptBeginner5 minmarkdown
- **NuGet Supply Chain**: Dependency scanning
pinned versions
0
Data
PromptBeginner5 minmarkdown
- **ORM Safety**: Parameterized queries
safe raw SQL
0
Coding & Debugging
PromptBeginner5 minmarkdown
If the target is an ASP.NET Core / .NET Web API
include these additional checks.
0
Data
PromptBeginner5 minmarkdown
- **Model Validation**: DataAnnotations
custom validators
0
General
PromptBeginner5 minmarkdown
- **Auth Schemes**: Correct JWT/cookie/OAuth configuration
token validation
0
Data
PromptBeginner5 minmarkdown
- **Verbose error messages**: Stack traces
SQL queries
0
Data
PromptBeginner5 minmarkdown
- **Unencrypted sensitive data**: PII
credentials
0
General
PromptBeginner5 minmarkdown
- **Weak cryptography**: Use of MD5
SHA1
0
Coding & Debugging
PromptBeginner5 minmarkdown
- **Hardcoded secrets**: API keys
passwords
0
General
PromptBeginner5 minmarkdown
- Review log collection
centralization
0