you must create a file named `TODO_perf-tuning.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaandem...

Mar 21, 2026

Creative

PromptBeginner5 minmarkdown

- Starts with measurement

not assumptions

Mar 21, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

Write all proposed optimizations and any code snippets to `TODO_perf-tuning.md` only. Do not create any other files. If specific files should be created or edited

include patch-style diffs or clearly labeled file blocks inside the TODO.

Mar 21, 2026

Data

PromptBeginner5 minmarkdown

- Over-caching without invalidation: Adding caches without invalidation strategies

serving stale data and creating consistency bugs

Mar 21, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

- Synchronous blocking in async code: Blocking the event loop or thread pool with synchronous operations

destroying concurrency benefits

Mar 21, 2026

Data

PromptBeginner5 minmarkdown

- Missing database indexes: Full table scans on frequently queried columns

causing query times to grow linearly with data volume

Mar 21, 2026

Data

PromptBeginner5 minmarkdown

- N+1 query patterns: Fetching related data in loops instead of using joins or batch queries

multiplying database round-trips linearly

Mar 21, 2026

Data

PromptBeginner5 minmarkdown

### Database (Query Analyzers

Index Tuning)

Mar 21, 2026

Data

PromptBeginner5 minmarkdown

- Deploy Application Performance Monitoring (Datadog

New Relic

Mar 21, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

- Use language-specific CPU and memory profilers (pprof for Go

py-spy for Python

Mar 21, 2026

Productivity

PromptBeginner5 minmarkdown

- Run Lighthouse for automated audits covering LCP

FID

Mar 21, 2026

Find agent skills by outcome

- Output encoding is context-aware (HTML

- Hardcoded credentials

- Detect debug modes

- Search for hardcoded secrets

- Note the programming language

- Classify changes by risk category (auth

- **Assess** code quality risks that create security vulnerabilities: race conditions

- **Flag** security misconfigurations including debug modes

- **Identify** sensitive data exposure such as hardcoded secrets

- Assign each task a stable ID (e.g.

- **Scan** staged git diffs for injection flaws including SQLi

You are a senior security researcher and specialist in application security auditing

- Treat every requirement below as an explicit

**RULE:** When using this prompt

- Starts with measurement

Write all proposed optimizations and any code snippets to `TODO_perf-tuning.md` only. Do not create any other files. If specific files should be created or edited

- **Over-caching without invalidation**: Adding caches without invalidation strategies

- **Synchronous blocking in async code**: Blocking the event loop or thread pool with synchronous operations

- **Missing database indexes**: Full table scans on frequently queried columns

- **N+1 query patterns**: Fetching related data in loops instead of using joins or batch queries

### Database (Query Analyzers

- Deploy Application Performance Monitoring (Datadog

- Use language-specific CPU and memory profilers (pprof for Go

- Run Lighthouse for automated audits covering LCP

- Assess code quality risks that create security vulnerabilities: race conditions

- Flag security misconfigurations including debug modes

- Identify sensitive data exposure such as hardcoded secrets

- Scan staged git diffs for injection flaws including SQLi

RULE: When using this prompt

- Over-caching without invalidation: Adding caches without invalidation strategies

- Synchronous blocking in async code: Blocking the event loop or thread pool with synchronous operations

- Missing database indexes: Full table scans on frequently queried columns

- N+1 query patterns: Fetching related data in loops instead of using joins or batch queries