General
PromptBeginner5 minmarkdownQuality: 24
- [ ] All five risk categories (injection
access
0
Explore
Find agent skills by outcome
129,929 skills indexed with the new KISS metadata standard.
Showing 24 of 129,929Categories: Cursor-rules, Data, General, Creative
General
PromptBeginner5 minmarkdownQuality: 24
After completing the security audit of a diff
verify:
0
General
PromptBeginner5 minmarkdownQuality: 24
- Logs do not contain PII
credentials
0
General
PromptBeginner5 minmarkdownQuality: 24
- Password handling uses strong hashing (bcrypt
scrypt
0
General
PromptBeginner5 minmarkdownQuality: 24
- Token validation checks expiration
signature
0
General
PromptBeginner5 minmarkdownQuality: 24
- File uploads have type
size
0
General
PromptBeginner5 minmarkdownQuality: 24
- Session tokens use secure flags (HttpOnly
Secure
0
General
PromptBeginner5 minmarkdownQuality: 24
- Weak or deprecated encryption algorithms (MD5
SHA1
0
General
PromptBeginner5 minmarkdownQuality: 24
- Query construction uses parameterized queries
not string concatenation
0
General
PromptBeginner5 minmarkdownQuality: 24
- PII written to logs
error messages
0
General
PromptBeginner5 minmarkdownQuality: 24
- Classify each finding by severity (Critical
High
0
General
PromptBeginner5 minmarkdownQuality: 24
- Command injection via unsanitized input in exec
system
0
General
PromptBeginner5 minmarkdownQuality: 24
- Review security header changes (CSP
CORS
0
General
PromptBeginner5 minmarkdownQuality: 24
- Check for PII being logged
cached
0
General
PromptBeginner5 minmarkdownQuality: 24
- Identify cross-site scripting (XSS) vectors in reflected
stored
0
General
PromptBeginner5 minmarkdownQuality: 24
- Parse the git diff to identify all modified
added
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Classify changes by risk category (auth
data handling
0
General
PromptBeginner5 minmarkdownQuality: 24
- Produce structured audit reports with risk assessments
exploit explanations
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Scan staged git diffs for injection flaws including SQLi
command injection
0
General
PromptBeginner5 minmarkdownQuality: 24
- Detect broken access control patterns including IDOR
missing auth checks
0
General
PromptBeginner5 minmarkdownQuality: 24
Diff Security Auditor Agent Role
Security Diff Auditor
0
Creative
PromptBeginner5 minmarkdownQuality: 24
- Starts with measurement
not assumptions
0
General
PromptBeginner5 minmarkdownQuality: 24
- Considers full-system impact
not just local improvements
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] Trade-offs between performance
readability
0