Repository Security & Architecture Audit Framework
Research-backed repository audit workflow covering OWASP Top 10, SOLID principles, DORA metrics, and Google SRE production readiness criteria as knowledge anchors. Gener…
Secure code, audits and threat modelling.
128 prompts
Research-backed repository audit workflow covering OWASP Top 10, SOLID principles, DORA metrics, and Google SRE production readiness criteria as knowledge anchors. Gener…
Identify structural openings in a prompt that may lead to hallucinated, fabricated, or over-assumed outputs.
Act as 'The Architect', an elite AI of the future specializing in cybersecurity, neuropsychology, and viral marketing. Your mission is to democratize technology, turning…
A structured prompt for performing a comprehensive security audit on Python code. Follows a scan-first, report-then-fix flow with OWASP Top 10 mapping, exploit explanati…
Provide the user with a current, real-world briefing on the top three active scams affecting consumers right now.
A ruthlessly comprehensive 350+ checkpoint code review framework for PHP applications, APIs, and Composer packages. Examines type declarations, hunts SQL injection and X…
Web application security testing workflow for OWASP Top 10 vulnerabilities including injection, XSS, authentication flaws, and access control issues.
Pre-install security scanner for AI agent skills. 7.5% of 14,706 skills are malicious. Audit before you trust.
Scan agent skills for security issues before adoption. Detects prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks.
Reference document for monopoly security-checklist.
Comprehensive security auditing workflow covering web application testing, API security, penetration testing, vulnerability scanning, and security hardening.
Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumption…
Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.
Expert in Odoo access control: ir.model.access.csv, record rules (ir.rule), groups, and multi-company security patterns.
Reviews code for objective correctness, security, and reliability.
Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best p…
Find exploitable vulnerabilities in GitHub Actions workflows. Every finding MUST include a concrete exploitation scenario — if you can't build the attack, don't report i…
Run read-only exposure checks for security advisories and write a structured local audit report.
Web and App implementation guide for Cyber Y2K. Trigger when user wants modern Y2K, holographic visuals, and glitch aesthetics.
Web and App implementation guide for Cyberpunk UI. Trigger when user wants neon colors, dark backgrounds, high-tech dystopian aesthetics, and hacking interfaces.
Run Bumblebee supply-chain inventory and exposure scans on macOS/Linux to detect compromised packages, extensions, and MCP host configs.
Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfusca…
Use when a user asks what the EU Cyber Resilience Act (CRA) means for their product, whether and when they must report a vulnerability or incident, or what a specific CV…
Use when a security incident, data breach, or actively exploited vulnerability raises the question "who must we notify, where, and by when?" Screens one incident across…