you must create a file named `TODO_perf-tuning.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaandem...

Mar 25, 2026

General

PromptBeginner5 minmarkdown

Diff Security Auditor Agent Role

# Security Diff Auditor

Mar 25, 2026

General

PromptBeginner5 minmarkdown

- [ ] Trade-offs between performance

readability

Mar 25, 2026

Find agent skills by outcome

- Password handling uses strong hashing (bcrypt

- File uploads have type

- Output encoding is context-aware (HTML

- Query construction uses parameterized queries

- Weak or deprecated encryption algorithms (MD5

- PII written to logs

- Hardcoded credentials

- Command injection via unsanitized input in exec

- Classify each finding by severity (Critical

- Review security header changes (CSP

- Detect debug modes

- Search for hardcoded secrets

- Check for PII being logged

- Note the programming language

- Identify cross-site scripting (XSS) vectors in reflected

- **Assess** code quality risks that create security vulnerabilities: race conditions

- **Produce** structured audit reports with risk assessments

- Parse the git diff to identify all modified

- **Detect** broken access control patterns including IDOR

- **Flag** security misconfigurations including debug modes

- **Identify** sensitive data exposure such as hardcoded secrets

**RULE:** When using this prompt

Diff Security Auditor Agent Role

- [ ] Trade-offs between performance

- Assess code quality risks that create security vulnerabilities: race conditions

- Produce structured audit reports with risk assessments

- Detect broken access control patterns including IDOR

- Flag security misconfigurations including debug modes

- Identify sensitive data exposure such as hardcoded secrets

RULE: When using this prompt