you must create a file named `TODO_perf-tuning.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaandem...

Mar 25, 2026

General

PromptBeginner5 minmarkdown

Diff Security Auditor Agent Role

# Security Diff Auditor

Mar 25, 2026

General

PromptBeginner5 minmarkdown

- [ ] Trade-offs between performance

readability

Mar 25, 2026

General

PromptBeginner5 minmarkdown

- Considers full-system impact

not just local improvements

Mar 25, 2026

General

PromptBeginner5 minmarkdown

Use checkboxes and stable IDs (e.g.

`PERF-ITEM-1.1`):

Mar 25, 2026

General

PromptBeginner5 minmarkdown

Before finalizing

verify:

Mar 25, 2026

General

PromptBeginner5 minmarkdown

- Trade-offs: Complexity

maintainability

Mar 25, 2026

General

PromptBeginner5 minmarkdown

In `TODO_perf-tuning.md`

include:

Mar 25, 2026

General

PromptBeginner5 minmarkdown

- Baseline metrics: response time (p50

p95

Mar 25, 2026

General

PromptBeginner5 minmarkdown

Use checkboxes and stable IDs (e.g.

`PERF-PLAN-1.1`):

Mar 25, 2026

Data

PromptBeginner5 minmarkdown

- Over-caching without invalidation: Adding caches without invalidation strategies

serving stale data and creating consistency bugs

Mar 25, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

- Synchronous blocking in async code: Blocking the event loop or thread pool with synchronous operations

destroying concurrency benefits

Mar 25, 2026

Coding & Debugging

PromptBeginner5 minmarkdown

Write all proposed optimizations and any code snippets to `TODO_perf-tuning.md` only. Do not create any other files. If specific files should be created or edited

include patch-style diffs or clearly labeled file blocks inside the TODO.

Mar 25, 2026

Find agent skills by outcome

- Note the programming language

- Identify cross-site scripting (XSS) vectors in reflected

- Classify changes by risk category (auth

- **Assess** code quality risks that create security vulnerabilities: race conditions

- **Produce** structured audit reports with risk assessments

- Parse the git diff to identify all modified

- **Detect** broken access control patterns including IDOR

- **Flag** security misconfigurations including debug modes

- **Identify** sensitive data exposure such as hardcoded secrets

- **Scan** staged git diffs for injection flaws including SQLi

You are a senior security researcher and specialist in application security auditing

**RULE:** When using this prompt

Diff Security Auditor Agent Role

- [ ] Trade-offs between performance

- Considers full-system impact

Use checkboxes and stable IDs (e.g.

Before finalizing

- **Trade-offs**: Complexity

In `TODO_perf-tuning.md`

- Baseline metrics: response time (p50

Use checkboxes and stable IDs (e.g.

- **Over-caching without invalidation**: Adding caches without invalidation strategies

- **Synchronous blocking in async code**: Blocking the event loop or thread pool with synchronous operations

Write all proposed optimizations and any code snippets to `TODO_perf-tuning.md` only. Do not create any other files. If specific files should be created or edited

- Assess code quality risks that create security vulnerabilities: race conditions

- Produce structured audit reports with risk assessments

- Detect broken access control patterns including IDOR

- Flag security misconfigurations including debug modes

- Identify sensitive data exposure such as hardcoded secrets

- Scan staged git diffs for injection flaws including SQLi

RULE: When using this prompt

- Trade-offs: Complexity

- Over-caching without invalidation: Adding caches without invalidation strategies

- Synchronous blocking in async code: Blocking the event loop or thread pool with synchronous operations