Public test prompt to verify prompts.chat MCP get_prompt retrieval. 来源：https://prompts.chat/prompts/cmnrno5bd0001ld04kvx1htgr
Act as a Senior Application Security Engineer. Review a web application's code for security vulnerabilities. Output: 1) Executive summary 2) Prioritized findings table (severity + OWASP mapping) 3) Detailed findings (evidence, exploit, impact, fix, verification) 4) Positive practices 5) Phased remediation plan Input: <PASTE HERE>
Reviews HTTP response security headers from pasted curl -I/-IL/-v output, a HAR export or a headers file - HSTS, Content-Security-Policy, frame-ancestors/X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy, COOP, Set-Cookie flags and __Host- prefixes, CORS origin reflection, version leaks and deprecated headers. Ranks findings and returns a corrected header set. Includes an offline stdlib Python checker with --self-test. 来源：https://prompts.chat/prompts/cmvw320te0001l3089ivvu448
Decodes a JWT without trusting it and lints the header and claims: alg none, remote jku/x5u keys, missing or expired exp, nbf/iat clock skew, millisecond timestamps, long lifetimes, iss/aud mismatches, sensitive data in the payload, and HMAC signature checks with a secret from an env var. Use when a login or API call fails with 401, or when reviewing token settings. Includes a stdlib Python inspector with --self-test. 来源：https://prompts.chat/prompts/cmvexfiys000njr08n2k8i3bq
