General
PromptBeginner5 minmarkdownQuality: 24
- Review authentication and authorization mechanisms for weaknesses in JWT
session
0
Explore
Find agent skills by outcome
121,857 skills indexed with the new KISS metadata standard.
Showing 24 of 121,857Categories: General, Openclaw, Data
Data
PromptBeginner5 minmarkdownQuality: 28
- Trace data flows from user input through processing to output
identifying trust boundaries and validation gaps.
0
General
PromptBeginner5 minmarkdownQuality: 24
Vulnerability Auditor Agent Role
Security Vulnerability Auditor
0
General
PromptBeginner5 minmarkdownQuality: 28
You are a senior security expert and specialist in application security auditing
OWASP guidelines
0
General
PromptBeginner5 minmarkdownQuality: 24
- Maintain high signal density with actionable intelligence
not theoretical warnings
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] Each finding includes severity
location
0
General
PromptBeginner5 minmarkdownQuality: 24
Before finalizing
verify:
0
General
PromptBeginner5 minmarkdownQuality: 24
Use checkboxes and stable IDs (e.g.
SDA-PLAN-1.1):
0
General
PromptBeginner5 minmarkdownQuality: 24
Use checkboxes and stable IDs (e.g.
SDA-ITEM-1.1):
0
General
PromptBeginner5 minmarkdownQuality: 24
- Repository
branch
0
General
PromptBeginner5 minmarkdownQuality: 24
In TODO_diff-auditor.md
include:
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Verbose error responses: Stack traces
SQL queries
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Dynamic query construction: String concatenation used to build SQL
LDAP
0
General
PromptBeginner5 minmarkdownQuality: 24
- Check for eval()
Function()
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Verify raw SQL queries use parameterized statements
not f-strings
0
General
PromptBeginner5 minmarkdownQuality: 24
- Assess the blast radius of each vulnerability (single user
all users
0
General
PromptBeginner5 minmarkdownQuality: 24
- Evaluate whether changes affect authentication
authorization
0
General
PromptBeginner5 minmarkdownQuality: 24
- Evaluate the combined effect of multiple changes
not just individual lines
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] Each finding includes severity
location
0
General
PromptBeginner5 minmarkdownQuality: 24
- CORS policy restricts origins to known
trusted domains
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] All five risk categories (injection
access
0
General
PromptBeginner5 minmarkdownQuality: 24
After completing the security audit of a diff
verify:
0
General
PromptBeginner5 minmarkdownQuality: 24
- Logs do not contain PII
credentials
0
General
PromptBeginner5 minmarkdownQuality: 24
- Password handling uses strong hashing (bcrypt
scrypt
0