General
PromptBeginner5 minmarkdown
- **Auth Schemes**: Correct JWT/cookie/OAuth configuration
token validation
0
Explore
Find agent skills by outcome
105,260 skills indexed with the new KISS metadata standard.
Showing 24 of 105,260Categories: Cursor-rules, Data, General, Creative, Coding & Debugging
Coding & Debugging
PromptBeginner5 minmarkdown
If the target is an ASP.NET Core / .NET Web API
include these additional checks.
0
Data
PromptBeginner5 minmarkdown
- **Verbose error messages**: Stack traces
SQL queries
0
General
PromptBeginner5 minmarkdown
- **Weak cryptography**: Use of MD5
SHA1
0
Coding & Debugging
PromptBeginner5 minmarkdown
- **Hardcoded secrets**: API keys
passwords
0
Data
PromptBeginner5 minmarkdown
- **Unencrypted sensitive data**: PII
credentials
0
General
PromptBeginner5 minmarkdown
- Review log collection
centralization
0
General
PromptBeginner5 minmarkdown
- Review access logging
audit trails
0
General
PromptBeginner5 minmarkdown
- Assess resource limits
quotas
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Test for encoding evasion: Unicode tricks
Base64 variants
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Check for unsafe output rendering: script injection
executable code
0
General
PromptBeginner5 minmarkdown
- Audit for sensitive information leakage: secrets
credentials
0
General
PromptBeginner5 minmarkdown
- Test for known jailbreak patterns
encoding-based bypass
0
General
PromptBeginner5 minmarkdown
If the target system includes LLM agents
prompts
0
General
PromptBeginner5 minmarkdown
- Analyze indirect injection channels: tool output
document-based
0
General
PromptBeginner5 minmarkdown
- Verify HTTPS enforcement
HSTS
0
General
PromptBeginner5 minmarkdown
- Analyze security headers (CSP
X-Frame-Options
0
General
PromptBeginner5 minmarkdown
- Validate and restrict CORS origins to known
trusted domains only.
0
General
PromptBeginner5 minmarkdown
- Use `bcrypt` or `argon2-cffi` for password hashing
never `hashlib` directly.
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Configure `SECRET_KEY` via environment variables
never hardcoded in settings.
0
General
PromptBeginner5 minmarkdown
- Avoid `eval()`
`Function()`
0
General
PromptBeginner5 minmarkdown
- Validate and sanitize input with libraries like `joi`
`zod`
0
General
PromptBeginner5 minmarkdown
- Evaluate transitive dependencies
not just direct imports.
0
General
PromptBeginner5 minmarkdown
- Run `npm audit`
`yarn audit`
0