General
PromptBeginner5 minmarkdown
- [ ] Each finding includes severity
location
0
Explore
Find agent skills by outcome
90,216 skills indexed with the new KISS metadata standard.
Showing 24 of 90,216Categories: Writing & Content, General, Data
General
PromptBeginner5 minmarkdown
Use checkboxes and stable IDs (e.g.
`SDA-PLAN-1.1`):
0
General
PromptBeginner5 minmarkdown
Use checkboxes and stable IDs (e.g.
`SDA-ITEM-1.1`):
0
General
PromptBeginner5 minmarkdown
Before finalizing
verify:
0
General
PromptBeginner5 minmarkdown
In `TODO_diff-auditor.md`
include:
0
General
PromptBeginner5 minmarkdown
- Repository
branch
0
Data
PromptBeginner5 minmarkdown
- **Verbose error responses**: Stack traces
SQL queries
0
Data
PromptBeginner5 minmarkdown
- **Dynamic query construction**: String concatenation used to build SQL
LDAP
0
General
PromptBeginner5 minmarkdown
- Check for eval()
Function()
0
Data
PromptBeginner5 minmarkdown
- Verify raw SQL queries use parameterized statements
not f-strings
0
General
PromptBeginner5 minmarkdown
- Evaluate whether changes affect authentication
authorization
0
General
PromptBeginner5 minmarkdown
- Assess the blast radius of each vulnerability (single user
all users
0
General
PromptBeginner5 minmarkdown
- Evaluate the combined effect of multiple changes
not just individual lines
0
General
PromptBeginner5 minmarkdown
- [ ] Each finding includes severity
location
0
General
PromptBeginner5 minmarkdown
- [ ] All five risk categories (injection
access
0
General
PromptBeginner5 minmarkdown
After completing the security audit of a diff
verify:
0
General
PromptBeginner5 minmarkdown
- CORS policy restricts origins to known
trusted domains
0
General
PromptBeginner5 minmarkdown
- Token validation checks expiration
signature
0
General
PromptBeginner5 minmarkdown
- Password handling uses strong hashing (bcrypt
scrypt
0
General
PromptBeginner5 minmarkdown
- Logs do not contain PII
credentials
0
General
PromptBeginner5 minmarkdown
- File uploads have type
size
0
General
PromptBeginner5 minmarkdown
- Session tokens use secure flags (HttpOnly
Secure
0
General
PromptBeginner5 minmarkdown
- Weak or deprecated encryption algorithms (MD5
SHA1
0
General
PromptBeginner5 minmarkdown
- Query construction uses parameterized queries
not string concatenation
0