Coding & Debugging
PromptBeginner5 minmarkdownQuality: 28
Write all proposed security audit findings and any code snippets to TODO_diff-auditor.md only. Do no...
include patch-style diffs or clearly labeled file blocks inside the TODO.
0
Explore
Find agent skills by outcome
131,194 skills indexed with the new KISS metadata standard.
Showing 24 of 131,194Categories: General, Coding & Debugging, Cursor-rules, Data
Data
PromptBeginner5 minmarkdownQuality: 24
- Verbose error responses: Stack traces
SQL queries
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Dynamic query construction: String concatenation used to build SQL
LDAP
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Validate that SECRET_KEY comes from environment variables
not source code
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Hardcoded secrets: API keys
passwords
0
General
PromptBeginner5 minmarkdownQuality: 24
- Check for eval()
Function()
0
Data
PromptBeginner5 minmarkdownQuality: 24
- Verify raw SQL queries use parameterized statements
not f-strings
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Check for base64-encoded secrets
environment variable values
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Include concrete code fixes with exact syntax
not abstract recommendations
0
General
PromptBeginner5 minmarkdownQuality: 24
- Assess the blast radius of each vulnerability (single user
all users
0
General
PromptBeginner5 minmarkdownQuality: 24
- Evaluate whether changes affect authentication
authorization
0
General
PromptBeginner5 minmarkdownQuality: 24
- Evaluate the combined effect of multiple changes
not just individual lines
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] Each finding includes severity
location
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- [ ] Remediation instructions include specific code snippets
not vague advice
0
General
PromptBeginner5 minmarkdownQuality: 24
- CORS policy restricts origins to known
trusted domains
0
General
PromptBeginner5 minmarkdownQuality: 24
- [ ] All five risk categories (injection
access
0
General
PromptBeginner5 minmarkdownQuality: 24
After completing the security audit of a diff
verify:
0
General
PromptBeginner5 minmarkdownQuality: 24
- Logs do not contain PII
credentials
0
General
PromptBeginner5 minmarkdownQuality: 24
- Password handling uses strong hashing (bcrypt
scrypt
0
General
PromptBeginner5 minmarkdownQuality: 24
- Token validation checks expiration
signature
0
General
PromptBeginner5 minmarkdownQuality: 24
- File uploads have type
size
0
General
PromptBeginner5 minmarkdownQuality: 24
- Session tokens use secure flags (HttpOnly
Secure
0
Coding & Debugging
PromptBeginner5 minmarkdownQuality: 24
- Output encoding is context-aware (HTML
JavaScript
0
General
PromptBeginner5 minmarkdownQuality: 24
- Weak or deprecated encryption algorithms (MD5
SHA1
0