General
PromptBeginner5 minmarkdown
- Potential logic flaws (price tampering
race conditions)
0
Explore
Find agent skills by outcome
19,157 skills indexed with the new KISS metadata standard.
Showing 24 of 19,157Categories: Communication, General, Openclaw, Data, Coding
Coding
PromptBeginner5 minmarkdown
- Hard-coded secrets
API keys
0
General
PromptBeginner5 minmarkdown
A night in paris
{
0
Coding
PromptBeginner5 minmarkdown
Highlight any file paths or code snippets (with line numbers if possible) when referencing issues. If something is unclear or a file is missing
ask for clarification.
0
General
PromptBeginner5 minmarkdown
- Rate limiting
brute-force protection
0
General
PromptBeginner5 minmarkdown
- Potential IDOR vectors (user IDs in URLs
file paths)
0
General
PromptBeginner5 minmarkdown
- Session/cookie security flags (Secure
HttpOnly
0
General
PromptBeginner5 minmarkdown
- File upload vulnerabilities (mime check
path traversal)
0
General
PromptBeginner5 minmarkdown
- Command injection (exec
eval
0
Coding
PromptBeginner5 minmarkdown
- XSS risks (unsafe innerHTML
lack of sanitization/escaping)
0
Coding
PromptBeginner5 minmarkdown
- Server/framework configurations (debug mode
error handling
0
Coding
PromptBeginner5 minmarkdown
- Environment variables and secrets management (.env files
hard-coded keys)
0
General
PromptBeginner5 minmarkdown
- Key features (user roles
payments
0
General
PromptBeginner5 minmarkdown
- JWT implementation (signature verification
expiration
0
General
PromptBeginner5 minmarkdown
- Dockerfile and container security (USER
exposed ports
0
General
PromptBeginner5 minmarkdown
- Password storage (hashing algorithm
salting)
0
General
PromptBeginner5 minmarkdown
- Tech stack (frontend
backend
0
General
PromptBeginner5 minmarkdown
- Authentication method (JWT
sessions
0
General
PromptBeginner5 minmarkdown
- Architecture (monolith
microservices
0
Coding
PromptBeginner5 minmarkdown
Do not require a public URL — analyze everything from the source code
package managers (package.json
0
Coding
PromptBeginner5 minmarkdown
Your task is to perform a comprehensive source code-assisted (gray-box/white-box) penetration test analysis on this web application. Base your analysis on the actual code
dependencies
0
General
PromptBeginner5 minmarkdown
Conduct the analysis following OWASP Top 10 (2021 or latest)
OWASP ASVS
0
General
PromptBeginner5 minmarkdown
- Store additional client details such as their father's name and age
mother's name and age
0
General
PromptBeginner5 minmarkdown
- The output language is Chinese
and the exam was conducted in China.
0