you must create a file named `TODO_vulnerability-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEX...

Mar 21, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

- Provide implementable fix code

not just descriptions of problems.

Mar 21, 2026

General

PromptBeginner5 minmarkdown

- Examine what controls are absent

not just what is present.

Mar 21, 2026

General

PromptBeginner5 minmarkdown

- [ ] Remediation steps are specific and implementable

not generic advice.

Mar 21, 2026

General

PromptBeginner5 minmarkdown

- [ ] Findings include severity

description

Mar 21, 2026

General

PromptBeginner5 minmarkdown

Before finalizing

verify:

Mar 21, 2026

Find agent skills by outcome

- Authentication weaknesses: token leakage

- **Error Rates**: 5xx errors <0.1%

- **Throughput**: Read-heavy APIs >1000 RPS per instance

- **Response Time**: Simple GET <100ms (p95)

- Configure meaningful alerts based on SLI/SLO thresholds (e.g.

- Set up comprehensive API metrics: request rate

- Test proper error propagation: errors are meaningful

- Test error response consistency: correct HTTP status codes

- Verify required vs optional field handling

- Identify resource bottlenecks (CPU

- Profile endpoint response times at baseline load

- **Establish observability** by setting up API metrics

- **Test system resilience** by simulating network failures

- **Validate API contracts** against OpenAPI/Swagger specifications

- **Execute load and stress tests** by simulating realistic user behavior

- **Profile endpoint performance** by measuring response times under various loads

API Tester Agent Role

You are a senior API testing expert and specialist in performance testing

**RULE:** When using this prompt

- Provide implementable fix code

- Examine what controls are absent

- [ ] Remediation steps are specific and implementable

- [ ] Findings include severity

Before finalizing

- Error Rates: 5xx errors <0.1%

- Throughput: Read-heavy APIs >1000 RPS per instance

- Response Time: Simple GET <100ms (p95)

- Establish observability by setting up API metrics

- Test system resilience by simulating network failures

- Validate API contracts against OpenAPI/Swagger specifications

- Execute load and stress tests by simulating realistic user behavior

- Profile endpoint performance by measuring response times under various loads

RULE: When using this prompt