you must create a file named `TODO_diff-auditor.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaande...

Mar 28, 2026

General

PromptBeginner5 minmarkdown

Vulnerability Auditor Agent Role

# Security Vulnerability Auditor

Mar 28, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

- Include concrete

implementable code fixes for every finding

Mar 28, 2026

Find agent skills by outcome

- Configure `SECRET_KEY` via environment variables

- Validate and sanitize input with libraries like `joi`

- Run `npm audit`

- Evaluate transitive dependencies

- Provide actionable remediation with specific code fixes

- Apply context-aware output encoding for HTML

- [ ] No secrets

- [ ] Encryption standards meet minimum requirements (AES-256

After completing an audit

- Weak password hashing algorithms (MD5

- Cross-site scripting (XSS) in reflected

- Check security headers (CSP

- Review network segmentation

- Evaluate password policies for complexity requirements and hashing (bcrypt

- Verify credential storage never includes plaintext secrets

- Review JWT implementation for weak signing algorithms

- Check for parameterized queries

- **Recommend** concrete remediation steps with severity ratings

- **Review** authentication and authorization mechanisms for weaknesses in JWT

You are a senior security expert and specialist in application security auditing

- Maintain high signal density with actionable intelligence

**RULE:** When using this prompt

Vulnerability Auditor Agent Role

- Include concrete

- Recommend concrete remediation steps with severity ratings

- Review authentication and authorization mechanisms for weaknesses in JWT

RULE: When using this prompt