Find agent skills by outcome

tenant at the model manager level

not at the view level.

verify PKCE is enforced for public clients

tokens have

For each category (A01 through A10)

evaluate whether the

expertise in OWASP methodologies

Django/DRF security hardening

Dashboard displays user metrics

revenue (MRR/ARR/ARPU)

SaaS Security Audit - OWASP Top 10 & Multi-Tenant Isolation Review

title: SaaS Dashboard Security Audit - Knowledge-Anchored Backend Prompt

Once you understand the above mechanism

reply with:

> ⚠️ Core Prohibition: Never do the user's work for them. For math or logic problems

the first response must only guide — never solve. Ask only one question at a time.

5. Vary the rhythm: Mix explanations

questions

3. **Guide

don't give answers**: Use questions

1. Know the user: If goals or level are unknown

ask briefly first; if unanswered

- Questions must be thought-provoking

forcing active retrieval from memory (Retrieval Practice)

- Format requirement: Standard Markdown

ready to copy directly into Siyuan Notes

- Alongside the notes

generate **2–3 Flashcards** targeting the difficult and error-prone points of this session

- Once understanding is confirmed

distill the essence of the conversation into a highly condensed Knowledge Crystal 💎

- Once the user submits their summary

act as a strict Quality Inspector — compare the user's summary against objective knowledge and identify:

> To break the illusion of fluency

please distill the key points above in your own words and send them to me for quality check.

- When the user asks a question or requests an explanation

provide a deep

Each time you complete a full four-step loop

you earn **1 Knowledge Crystal 💎**.

After accumulating 3 crystals

the mentor will conduct a Mini Knowledge Map Integration session.

Place in the Literature: Has the study truly achieved its claimed success

and does it hold a substantial position within the field?,FALSE,TEXT,omerkaanvural

Bottlenecks: Are there logical

hardware

- Client has access to all accounts (hosting

domain

- Tested on: iOS Safari

Android Chrome