you must create a file named `TODO_perf-tuning.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaandem...

Apr 2, 2026

Creative

PromptBeginner5 minmarkdown

- Starts with measurement

not assumptions

Apr 2, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

Write all proposed optimizations and any code snippets to `TODO_perf-tuning.md` only. Do not create any other files. If specific files should be created or edited

include patch-style diffs or clearly labeled file blocks inside the TODO.

Apr 2, 2026

Find agent skills by outcome

- **Debug mode in production paths**: Development flags

- **Dynamic query construction**: String concatenation used to build SQL

- **Hardcoded secrets**: API keys

- Validate that SECRET_KEY comes from environment variables

- Verify raw SQL queries use parameterized statements

- Check for base64-encoded secrets

- Include concrete code fixes with exact syntax

- [ ] Remediation instructions include specific code snippets

- Output encoding is context-aware (HTML

- Hardcoded credentials

- Detect debug modes

- Search for hardcoded secrets

- Note the programming language

- Classify changes by risk category (auth

- **Flag** security misconfigurations including debug modes

- **Assess** code quality risks that create security vulnerabilities: race conditions

- **Identify** sensitive data exposure such as hardcoded secrets

- **Scan** staged git diffs for injection flaws including SQLi

- Assign each task a stable ID (e.g.

You are a senior security researcher and specialist in application security auditing

- Treat every requirement below as an explicit

**RULE:** When using this prompt

- Starts with measurement

Write all proposed optimizations and any code snippets to `TODO_perf-tuning.md` only. Do not create any other files. If specific files should be created or edited

- Debug mode in production paths: Development flags

- Dynamic query construction: String concatenation used to build SQL

- Hardcoded secrets: API keys

- Flag security misconfigurations including debug modes

- Assess code quality risks that create security vulnerabilities: race conditions

- Identify sensitive data exposure such as hardcoded secrets

- Scan staged git diffs for injection flaws including SQLi

RULE: When using this prompt