General
PromptBeginner5 minmarkdown
- Session tokens use secure flags (HttpOnly
Secure
0
Explore
Find agent skills by outcome
90,339 skills indexed with the new KISS metadata standard.
Showing 24 of 90,339Categories: General, Writing & Content, Data
General
PromptBeginner5 minmarkdown
- Weak or deprecated encryption algorithms (MD5
SHA1
0
General
PromptBeginner5 minmarkdown
- Query construction uses parameterized queries
not string concatenation
0
General
PromptBeginner5 minmarkdown
- PII written to logs
error messages
0
General
PromptBeginner5 minmarkdown
- Classify each finding by severity (Critical
High
0
General
PromptBeginner5 minmarkdown
- Command injection via unsanitized input in exec
system
0
General
PromptBeginner5 minmarkdown
- Review security header changes (CSP
CORS
0
General
PromptBeginner5 minmarkdown
- Check for PII being logged
cached
0
General
PromptBeginner5 minmarkdown
- Identify cross-site scripting (XSS) vectors in reflected
stored
0
Data
PromptBeginner5 minmarkdown
- Classify changes by risk category (auth
data handling
0
General
PromptBeginner5 minmarkdown
- **Produce** structured audit reports with risk assessments
exploit explanations
0
General
PromptBeginner5 minmarkdown
- Parse the git diff to identify all modified
added
0
General
PromptBeginner5 minmarkdown
- **Detect** broken access control patterns including IDOR
missing auth checks
0
Data
PromptBeginner5 minmarkdown
- **Scan** staged git diffs for injection flaws including SQLi
command injection
0
General
PromptBeginner5 minmarkdown
Diff Security Auditor Agent Role
# Security Diff Auditor
0
General
PromptBeginner5 minmarkdown
- Considers full-system impact
not just local improvements
0
General
PromptBeginner5 minmarkdown
- [ ] Trade-offs between performance
readability
0
General
PromptBeginner5 minmarkdown
Before finalizing
verify:
0
General
PromptBeginner5 minmarkdown
Use checkboxes and stable IDs (e.g.
`PERF-ITEM-1.1`):
0
General
PromptBeginner5 minmarkdown
Use checkboxes and stable IDs (e.g.
`PERF-PLAN-1.1`):
0
General
PromptBeginner5 minmarkdown
- **Trade-offs**: Complexity
maintainability
0
General
PromptBeginner5 minmarkdown
- Baseline metrics: response time (p50
p95
0
Data
PromptBeginner5 minmarkdown
- **Over-caching without invalidation**: Adding caches without invalidation strategies
serving stale data and creating consistency bugs
0
General
PromptBeginner5 minmarkdown
In `TODO_perf-tuning.md`
include:
0