General
PromptBeginner5 minmarkdown
- Assess the blast radius of each vulnerability (single user
all users
0
Explore
Find agent skills by outcome
108,960 skills indexed with the new KISS metadata standard.
Showing 24 of 108,960
General
PromptBeginner5 minmarkdown
- Evaluate the combined effect of multiple changes
not just individual lines
0
General
PromptBeginner5 minmarkdown
- [ ] Each finding includes severity
location
0
Coding & Debugging
PromptBeginner5 minmarkdown
- [ ] Remediation instructions include specific code snippets
not vague advice
0
General
PromptBeginner5 minmarkdown
- [ ] All five risk categories (injection
access
0
General
PromptBeginner5 minmarkdown
After completing the security audit of a diff
verify:
0
General
PromptBeginner5 minmarkdown
- CORS policy restricts origins to known
trusted domains
0
General
PromptBeginner5 minmarkdown
- Token validation checks expiration
signature
0
General
PromptBeginner5 minmarkdown
- Password handling uses strong hashing (bcrypt
scrypt
0
General
PromptBeginner5 minmarkdown
- Logs do not contain PII
credentials
0
General
PromptBeginner5 minmarkdown
- File uploads have type
size
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Output encoding is context-aware (HTML
JavaScript
0
General
PromptBeginner5 minmarkdown
- Session tokens use secure flags (HttpOnly
Secure
0
General
PromptBeginner5 minmarkdown
- Weak or deprecated encryption algorithms (MD5
SHA1
0
General
PromptBeginner5 minmarkdown
- Query construction uses parameterized queries
not string concatenation
0
General
PromptBeginner5 minmarkdown
- PII written to logs
error messages
0
General
PromptBeginner5 minmarkdown
- Classify each finding by severity (Critical
High
0
General
PromptBeginner5 minmarkdown
- Command injection via unsanitized input in exec
system
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Hardcoded credentials
API keys
0
General
PromptBeginner5 minmarkdown
- Review security header changes (CSP
CORS
0
General
PromptBeginner5 minmarkdown
- Check for PII being logged
cached
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Detect debug modes
verbose error output
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Search for hardcoded secrets
API keys
0
General
PromptBeginner5 minmarkdown
- Identify cross-site scripting (XSS) vectors in reflected
stored
0