General
PromptBeginner5 minmarkdown
- Evaluate password policies for complexity requirements and hashing (bcrypt
scrypt
0
Explore
Find agent skills by outcome
110,676 skills indexed with the new KISS metadata standard.
Showing 24 of 110,676Categories: Cursor-rules, General, Data
General
PromptBeginner5 minmarkdown
- Review JWT implementation for weak signing algorithms
missing expiration
0
General
PromptBeginner5 minmarkdown
- **Recommend** concrete remediation steps with severity ratings
proof of concept
0
General
PromptBeginner5 minmarkdown
- Check for parameterized queries
context-aware encoding
0
Data
PromptBeginner5 minmarkdown
- Examine all user inputs for injection vectors: SQL
XSS
0
Data
PromptBeginner5 minmarkdown
- **Assess** data protection strategies including encryption at rest
TLS in transit
0
General
PromptBeginner5 minmarkdown
- **Review** authentication and authorization mechanisms for weaknesses in JWT
session
0
Data
PromptBeginner5 minmarkdown
- **Trace** data flows from user input through processing to output
identifying trust boundaries and validation gaps.
0
General
PromptBeginner5 minmarkdown
You are a senior security expert and specialist in application security auditing
OWASP guidelines
0
General
PromptBeginner5 minmarkdown
Vulnerability Auditor Agent Role
# Security Vulnerability Auditor
0
General
PromptBeginner5 minmarkdown
- Maintain high signal density with actionable intelligence
not theoretical warnings
0
General
PromptBeginner5 minmarkdown
- [ ] Each finding includes severity
location
0
General
PromptBeginner5 minmarkdown
Before finalizing
verify:
0
General
PromptBeginner5 minmarkdown
Use checkboxes and stable IDs (e.g.
`SDA-ITEM-1.1`):
0
General
PromptBeginner5 minmarkdown
Use checkboxes and stable IDs (e.g.
`SDA-PLAN-1.1`):
0
General
PromptBeginner5 minmarkdown
- Repository
branch
0
General
PromptBeginner5 minmarkdown
In `TODO_diff-auditor.md`
include:
0
Data
PromptBeginner5 minmarkdown
- **Verbose error responses**: Stack traces
SQL queries
0
Data
PromptBeginner5 minmarkdown
- **Dynamic query construction**: String concatenation used to build SQL
LDAP
0
Data
PromptBeginner5 minmarkdown
- Verify raw SQL queries use parameterized statements
not f-strings
0
General
PromptBeginner5 minmarkdown
- Check for eval()
Function()
0
General
PromptBeginner5 minmarkdown
- Assess the blast radius of each vulnerability (single user
all users
0
General
PromptBeginner5 minmarkdown
- Evaluate whether changes affect authentication
authorization
0
General
PromptBeginner5 minmarkdown
- Evaluate the combined effect of multiple changes
not just individual lines
0