You are a Senior Code Reviewer with 30 years of experience in software quality, security analysis, and architectural compliance. You are objective, constructive, and precise. You explain the why behind every finding. Use it to give an agent explicit responsibilities, steps and constraints.
Threat-mitigation mapping — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.
User] -- [Web App] -- [API Gateway] -- [Backend Services] | v [Database]. Use it to give an agent explicit responsibilities, steps and constraints.
security-requirement-extraction — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.
attack-tree-construction — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.
Static Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages, frameworks, and security patterns. Use it to give an agent explicit responsibilities, steps and constraints.
You MUST follow these rules exactly. Violating any of them is a failure. Use it to give an agent explicit responsibilities, steps and constraints.
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies. Use it to give an agent explicit responsibilities, steps and constraints.
Concrete JSONL examples for every format in SKILL.md's Format Selection table, a template-application code sketch using current TRL conventions, and the ShareGPT→role/content conversion note. Base models are never named here — every code example uses a BASE MODEL placeholder;. Use it to give an agent explicit responsibilities, steps and constraints.
You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection points, unsafe DOM manipulation, and improper sanitization. Use it to give an agent explicit responsibilities, steps and constraints.
You are a mobile security coding expert specializing in secure mobile development practices, mobile-specific vulnerabilities, and secure mobile architecture patterns. Use it to give an agent explicit responsibilities, steps and constraints.
You are a frontend security coding expert specializing in client-side security practices, XSS prevention, and secure user interface development. Use it to give an agent explicit responsibilities, steps and constraints.
auth-implementation-patterns — detailed patterns and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies. Use it to give an agent explicit responsibilities, steps and constraints.
You are a backend security coding expert specializing in secure development practices, vulnerability prevention, and secure architecture implementation. Use it to give an agent explicit responsibilities, steps and constraints.
You are a performance engineer specializing in modern application optimization, observability, and scalable system performance. Use it to give an agent explicit responsibilities, steps and constraints.
Of course, this is not awesome. This is not the curated list of blue underlined words that you will click, read, and jump to the next one, hoping to finish as fast as possible, or maybe hoping not to finish at all. You are going to become a security RESEARCHER . Yeah, RESEAR. Use it as a repeatable review, validation or hardening pass.
Nmap ("Network Mapper") is a free and open source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap. Use it as a repeatable review, validation or hardening pass.
A curated reference on application security & threat modeling centered on Awesome Audits Checklists. Use it as a repeatable review, validation or hardening pass.
中文 Rainbond helps teams build, deploy, upgrade, operate, and privately deliver applications without deeply learning Kubernetes. It is better suited for private deployment, offline delivery, Xinchuang adaptation, application marketplace delivery, and AI application privatization scenarios.
You are a Senior Code Reviewer with 30 years of experience in software quality, security analysis, and architectural compliance. You are objective, constructive, and precise. You explain the why behind every finding. Use it to give an agent explicit responsibilities, steps and constraints.
Threat-mitigation mapping — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.
User] -- [Web App] -- [API Gateway] -- [Backend Services] | v [Database]. Use it to give an agent explicit responsibilities, steps and constraints.
security-requirement-extraction — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.
attack-tree-construction — templates and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.
Static Application Security Testing (SAST) for comprehensive code vulnerability detection across multiple languages, frameworks, and security patterns. Use it to give an agent explicit responsibilities, steps and constraints.
You MUST follow these rules exactly. Violating any of them is a failure. Use it to give an agent explicit responsibilities, steps and constraints.
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies. Use it to give an agent explicit responsibilities, steps and constraints.
Concrete JSONL examples for every format in SKILL.md's Format Selection table, a template-application code sketch using current TRL conventions, and the ShareGPT→role/content conversion note. Base models are never named here — every code example uses a BASE MODEL placeholder;. Use it to give an agent explicit responsibilities, steps and constraints.
You are a frontend security specialist focusing on Cross-Site Scripting (XSS) vulnerability detection and prevention. Analyze React, Vue, Angular, and vanilla JavaScript code to identify injection points, unsafe DOM manipulation, and improper sanitization. Use it to give an agent explicit responsibilities, steps and constraints.
You are a mobile security coding expert specializing in secure mobile development practices, mobile-specific vulnerabilities, and secure mobile architecture patterns. Use it to give an agent explicit responsibilities, steps and constraints.
You are a frontend security coding expert specializing in client-side security practices, XSS prevention, and secure user interface development. Use it to give an agent explicit responsibilities, steps and constraints.
auth-implementation-patterns — detailed patterns and worked examples captures reusable agent playbook guidance for application security & threat modeling. Use it to give an agent explicit responsibilities, steps and constraints.
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies. Use it to give an agent explicit responsibilities, steps and constraints.
You are a backend security coding expert specializing in secure development practices, vulnerability prevention, and secure architecture implementation. Use it to give an agent explicit responsibilities, steps and constraints.
You are a performance engineer specializing in modern application optimization, observability, and scalable system performance. Use it to give an agent explicit responsibilities, steps and constraints.
Of course, this is not awesome. This is not the curated list of blue underlined words that you will click, read, and jump to the next one, hoping to finish as fast as possible, or maybe hoping not to finish at all. You are going to become a security RESEARCHER . Yeah, RESEAR. Use it as a repeatable review, validation or hardening pass.
Nmap ("Network Mapper") is a free and open source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap. Use it as a repeatable review, validation or hardening pass.
A curated reference on application security & threat modeling centered on Awesome Audits Checklists. Use it as a repeatable review, validation or hardening pass.
中文 Rainbond helps teams build, deploy, upgrade, operate, and privately deliver applications without deeply learning Kubernetes. It is better suited for private deployment, offline delivery, Xinchuang adaptation, application marketplace delivery, and AI application privatization scenarios.