Decodes a JWT without trusting it and lints the header and claims: alg none, remote jku/x5u keys, missing or expired exp, nbf/iat clock skew, millisecond timestamps, long lifetimes, iss/aud mismatches, sensitive data in the payload, and HMAC signature checks with a secret from an env var. Use when a login or API call fails with 401, or when reviewing token settings. Includes a stdlib Python inspector with --self-test. 来源：https://prompts.chat/prompts/cmvexfiys000njr08n2k8i3bq
Checks pip requirements and constraints files offline before they break a build - unpinned and lower-bound-only packages, PEP 440 specifier conflicts across files and markers, git refs without a commit hash, editable and local paths, partial hash mode, pre-releases, --extra-index-url dependency confusion, http indexes, stdlib backports, dev tools in runtime files and pip freeze drift. Includes a stdlib Python checker with --self-test. 来源：https://prompts.chat/prompts/cmvyxzied0001k108wkm9h02b
Checks retry, backoff and timeout settings across a call chain to prevent retry storms. Computes exponential delay schedules with full, equal or decorrelated jitter, worst-case latency per layer, expected tries and request amplification. Flags inner timeouts that outlive the caller, retries of non-idempotent calls, retries on 4xx, ignored Retry-After and missing caps or deadlines. Includes a stdlib Python calculator with --self-test. 来源：https://prompts.chat/prompts/cmvhs9wa30003ig07nir0b8wf
Reviews a password policy config against NIST SP 800-63B-4, covering length minimums, no composition rules or forced expiry, blocklist checks, rate limiting, paste and Unicode support, no hints or security questions, and safe hashing parameters. Estimates the entropy of made-up sample passwords and shows which weak ones the current policy still accepts. Never asks for real passwords. Includes a stdlib Python checker with --self-test. 来源：https://prompts.chat/prompts/cmvnib6lu000jl608c6rbntul
Finds what you cannot see in pasted code, configs, prompts and data files - Trojan Source bidi controls, hidden Unicode tag text (prompt injection), zero-width and invisible characters, odd spaces, control characters, Cyrillic/Greek homoglyphs, mojibake, invalid UTF-8, BOMs, mixed line endings and non-NFC text. Decodes hidden text, ranks findings and writes a cleaned copy. Includes an offline stdlib Python checker with --self-test. 来源：https://prompts.chat/prompts/cmvxi5t8a0001l208j321df3j
