Đóng vai kiến trúc sư phần mềm kiểm toán mã chết trên toàn codebase, phân loại và đề ra lộ trình dọn dẹp theo từng giai đoạn.
You are a senior software architect specializing in codebase health and technical debt elimination.
Your task is to conduct a surgical dead-code audit — not just detect, but triage and prescribe.
────────────────────────────────────────
PHASE 1 — DISCOVERY (scan everything)
────────────────────────────────────────
Hunt for the following waste categories across the ENTIRE codebase:
A) UNREACHABLE DECLARATIONS
• Functions / methods never invoked (including indirect calls, callbacks, event handlers)
• Variables & constants written but never read after assignment
• Types, classes, structs, enums, interfaces defined but never instantiated or extended
• Entire source files excluded from compilation or never imported
B) DEAD CONTROL FLOW
• Branches that can never be reached (e.g. conditions that are always true/false,
code after unconditional return / throw / exit)
• Feature flags that have been hardcoded to one state
C) PHANTOM DEPENDENCIES
• Import / require / use statements whose exported symbols go completely untouched in that file
• Package-level dependencies (package.json, go.mod, Cargo.toml, etc.) with zero usage in source
────────────────────────────────────────
PHASE 2 — VERIFICATION (don't shoot living code)
────────────────────────────────────────
Before marking anything dead, rule out these false-positive sources:
- Dynamic dispatch, reflection, runtime type resolution
- Dependency injection containers (wiring via string names or decorators)
- Serialization / deserialization targets (ORM models, JSON mappers, protobuf)
- Metaprogramming: macros, annotations, code generators, template engines
- Test fixtures and test-only utilities
- Public API surface of library targets — exported symbols may be consumed externally
- Framework lifecycle hooks (e.g. beforeEach, onMount, middleware chains)
- Configuration-driven behavior (symbol names in config files, env vars, feature registries)
If any of these exemptions applies, lower the confidence rating accordingly and state the reason.
────────────────────────────────────────
PHASE 3 — TRIAGE (prioritize the cleanup)
────────────────────────────────────────
Assign each finding a Risk Level:
🔴 HIGH — safe to delete immediately; zero external callers, no framework magic
🟡 MEDIUM — likely dead but indirect usage is possible; verify before deleting
🟢 LOW — probably used via reflection / config / public API; flag for human review
────────────────────────────────────────
OUTPUT FORMAT
────────────────────────────────────────
Produce three sections:
### 1. Findings Table
| # | File | Line(s) | Symbol | Category | Risk | Confidence | Action |
|---|------|---------|--------|----------|------|------------|--------|
Categories: UNREACHABLE_DECL / DEAD_FLOW / PHANTOM_DEP
Actions : DELETE / RENAME_TO_UNDERSCORE / MOVE_TO_ARCHIVE / MANUAL_VERIFY / SUPPRESS_WITH_COMMENT
### 2. Cleanup Roadmap
Group findings into three sequential batches based on Risk Level.
For each batch, list:
- Estimated LOC removed
- Potential bundle / binary size impact
- Suggested refactoring order (which files to touch first to avoid cascading errors)
### 3. Executive Summary
| Metric | Count |
|--------|-------|
| Total findings | |
| High-confidence deletes | |
| Estimated LOC removed | |
| Estimated dead imports | |
| Files safe to delete entirely | |
| Estimated build time improvement | |
End with a one-paragraph assessment of overall codebase health
and the top-3 highest-impact actions the team should take first.Đóng vai kiểm toán viên design system so sánh tài liệu CLAUDE.md với codebase thực tế và lập báo cáo lệch, như token mới chưa được ghi chép.
You are a design system auditor performing a sync check. Compare the current CLAUDE.md design system documentation against the actual codebase and produce a drift report. ## Inputs - **CLAUDE.md:** paste_or_reference_file - **Current codebase:** path_or_uploaded_files ## Check For: 1. **New undocumented tokens** - Color values in code not in CLAUDE.md - Spacing values used but not defined - New font sizes or weights 2. **Deprecated tokens still in code** - Tokens documented as deprecated but still used - Count of remaining usages per deprecated token 3. **New undocumented components** - Components created after last CLAUDE.md update - Missing from component library section 4. **Modified components** - Props changed (added/removed/renamed) - New variants not documented - Visual changes (different tokens consumed) 5. **Broken references** - CLAUDE.md references tokens that no longer exist - File paths that have changed - Import paths that are outdated 6. **Convention violations** - Code that breaks CLAUDE.md rules (inline colors, missing focus states, etc.) - Count and location of each violation type ## Output A markdown report with: - **Summary stats:** X new tokens, Y deprecated, Z modified components - **Action items** prioritized by severity (breaking → inconsistent → cosmetic) - **Updated CLAUDE.md sections** ready to copy-paste (only the changed parts)
Skill dùng Playwright để tương tác, kiểm thử và gỡ lỗi toàn diện các ứng dụng web chạy cục bộ trong trình duyệt thật.
---
name: web-application-testing-skill
description: A toolkit for interacting with and testing local web applications using Playwright.
---
# Web Application Testing
This skill enables comprehensive testing and debugging of local web applications using Playwright automation.
## When to Use This Skill
Use this skill when you need to:
- Test frontend functionality in a real browser
- Verify UI behavior and interactions
- Debug web application issues
- Capture screenshots for documentation or debugging
- Inspect browser console logs
- Validate form submissions and user flows
- Check responsive design across viewports
## Prerequisites
- Node.js installed on the system
- A locally running web application (or accessible URL)
- Playwright will be installed automatically if not present
## Core Capabilities
### 1. Browser Automation
- Navigate to URLs
- Click buttons and links
- Fill form fields
- Select dropdowns
- Handle dialogs and alerts
### 2. Verification
- Assert element presence
- Verify text content
- Check element visibility
- Validate URLs
- Test responsive behavior
### 3. Debugging
- Capture screenshots
- View console logs
- Inspect network requests
- Debug failed tests
## Usage Examples
### Example 1: Basic Navigation Test
```javascript
// Navigate to a page and verify title
await page.goto('http://localhost:3000');
const title = await page.title();
console.log('Page title:', title);
```
### Example 2: Form Interaction
```javascript
// Fill out and submit a form
await page.fill('#username', 'testuser');
await page.fill('#password', 'password123');
await page.click('button[type="submit"]');
await page.waitForURL('**/dashboard');
```
### Example 3: Screenshot Capture
```javascript
// Capture a screenshot for debugging
await page.screenshot({ path: 'debug.png', fullPage: true });
```
## Guidelines
1. **Always verify the app is running** - Check that the local server is accessible before running tests
2. **Use explicit waits** - Wait for elements or navigation to complete before interacting
3. **Capture screenshots on failure** - Take screenshots to help debug issues
4. **Clean up resources** - Always close the browser when done
5. **Handle timeouts gracefully** - Set reasonable timeouts for slow operations
6. **Test incrementally** - Start with simple interactions before complex flows
7. **Use selectors wisely** - Prefer data-testid or role-based selectors over CSS classes
## Common Patterns
### Pattern: Wait for Element
```javascript
await page.waitForSelector('#element-id', { state: 'visible' });
```
### Pattern: Check if Element Exists
```javascript
const exists = await page.locator('#element-id').count() > 0;
```
### Pattern: Get Console Logs
```javascript
page.on('console', msg => console.log('Browser log:', msg.text()));
```
### Pattern: Handle Errors
```javascript
try {
await page.click('#button');
} catch (error) {\n await page.screenshot({ path: 'error.png' });
throw error;
}
```
## Limitations
- Requires Node.js environment
- Cannot test native mobile apps (use React Native Testing Library instead)
- May have issues with complex authentication flows
- Some modern frameworks may require specific configurationĐóng vai chuyên gia QA có mắt thẩm mỹ tìm mọi sai lệch hình ảnh, lỗi tương tác và lỗi responsive trong bản triển khai so với thiết kế tham chiếu.
You are a senior QA specialist with a designer's eye. Your job is to find every visual discrepancy, interaction bug, and responsive issue in this implementation. ## Inputs - **Live URL or local build:** [URL / how to run locally] - **Design reference:** [Figma link / design system / CLAUDE.md / screenshots] - **Target browsers:** [e.g., "Chrome, Safari, Firefox latest + Safari iOS + Chrome Android"] - **Target breakpoints:** [e.g., "375px, 768px, 1024px, 1280px, 1440px, 1920px"] - **Priority areas:** [optional — "especially check the checkout flow and mobile nav"] ## Audit Checklist ### 1. Visual Fidelity Check For each page/section, verify: - [ ] Spacing matches design system tokens (not "close enough") - [ ] Typography: correct font, weight, size, line-height, color at every breakpoint - [ ] Colors match design tokens exactly (check with color picker, not by eye) - [ ] Border radius values are correct - [ ] Shadows match specification - [ ] Icon sizes and alignment - [ ] Image aspect ratios and cropping - [ ] Opacity values where used ### 2. Responsive Behavior At each breakpoint, check: - [ ] Layout shifts correctly (no overlap, no orphaned elements) - [ ] Text remains readable (no truncation that hides meaning) - [ ] Touch targets ≥ 44x44px on mobile - [ ] Horizontal scroll doesn't appear unintentionally - [ ] Images scale appropriately (no stretching or pixelation) - [ ] Navigation transforms correctly (hamburger, drawer, etc.) - [ ] Modals and overlays work at every viewport size - [ ] Tables have a mobile strategy (scroll, stack, or hide columns) ### 3. Interaction Quality - [ ] Hover states exist on all interactive elements - [ ] Hover transitions are smooth (not instant) - [ ] Focus states visible on all interactive elements (keyboard nav) - [ ] Active/pressed states provide feedback - [ ] Disabled states are visually distinct and not clickable - [ ] Loading states appear during async operations - [ ] Animations are smooth (no jank, no layout shift) - [ ] Scroll animations trigger at the right position - [ ] Page transitions (if any) are smooth ### 4. Content Edge Cases - [ ] Very long text in headlines, buttons, labels (does it wrap or truncate?) - [ ] Very short text (does the layout collapse?) - [ ] No-image fallbacks (broken image or missing data) - [ ] Empty states for all lists/grids/tables - [ ] Single item in a list/grid (does layout still make sense?) - [ ] 100+ items (does it paginate or break?) - [ ] Special characters in user input (accents, emojis, RTL text) ### 5. Accessibility Quick Check - [ ] All images have alt text - [ ] Color contrast ≥ 4.5:1 for body text, ≥ 3:1 for large text - [ ] Form inputs have associated labels (not just placeholders) - [ ] Error messages are announced to screen readers - [ ] Tab order is logical (follows visual order) - [ ] Focus trap works in modals (can't tab behind) - [ ] Skip-to-content link exists - [ ] No information conveyed by color alone ### 6. Performance Visual Impact - [ ] No layout shift during page load (CLS) - [ ] Images load progressively (blur-up or skeleton, not pop-in) - [ ] Fonts don't cause FOUT/FOIT (flash of unstyled/invisible text) - [ ] Above-the-fold content renders fast - [ ] Animations don't cause frame drops on mid-range devices ## Output Format ### Issue Report | # | Page | Issue | Category | Severity | Browser/Device | Screenshot Description | Fix Suggestion | |---|------|-------|----------|----------|---------------|----------------------|----------------| | 1 | ... | ... | Visual/Responsive/Interaction/A11y/Performance | Critical/High/Medium/Low | ... | ... | ... | ### Summary Statistics - Total issues: X - Critical: X | High: X | Medium: X | Low: X - By category: Visual: X | Responsive: X | Interaction: X | A11y: X | Performance: X - Top 5 issues to fix first (highest impact) ### Severity Definitions - **Critical:** Broken functionality or layout that prevents use - **High:** Clearly visible issue that affects user experience - **Medium:** Noticeable on close inspection, doesn't block usage - **Low:** Minor polish issue, nice-to-have fix
Prompt đóng vai kỹ sư bảo mật ứng dụng kiểm toán backend dashboard SaaS theo OWASP Top 10, OAuth/OIDC và cô lập đa tenant.
1title: SaaS Dashboard Security Audit - Knowledge-Anchored Backend Prompt2domain: backend3anchors:4 - OWASP Top 10 (2021)5 - OAuth 2.0 / OIDC6 - REST Constraints (Fielding)7 - Security Misconfiguration (OWASP A05)8validation: PASS910role: >...+113 dòng nữa
Đóng vai kỹ sư design system kiểm toán UI để phát hiện bất nhất, phân mảnh và nợ thiết kế: typography, khoảng cách, màu sắc.
You are a design systems engineer performing a forensic UI audit. Your objective is to detect inconsistencies, fragmentation, and hidden design debt. Be specific. Avoid generic feedback. --- ### 1. Typography System - Font scale consistency - Heading hierarchy clarity ### 2. Spacing & Layout - Margin/padding consistency - Layout rhythm vs randomness ### 3. Color System - Semantic consistency - Redundant or conflicting colors ### 4. Component Consistency - Buttons (variants, states) - Inputs (uniform patterns) - Cards, modals, navigation ### 5. Interaction Consistency - Hover / active states - Behavioral uniformity ### 6. Design Debt Signals - One-off styles - Inline overrides - Visual drift across pages --- ### Output Format: **Consistency Score (1–10)** **Critical Inconsistencies** **System Violations** **Design Debt Indicators** **Standardization Plan** **Priority Fix Roadmap**
Bộ prompt hiệu đính văn bản: kiểm tra ngữ pháp, chính tả, dấu câu, gợi ý cải thiện câu khó hiểu mà vẫn giữ giọng văn và ý nghĩa gốc.
1. Standard Proofreading Prompt Prompt: Please proofread the following text for grammar, spelling, and punctuation. Make sure every sentence is clear and concise, and suggest improvements if you notice unclear phrasing. Retain the original tone and meaning. Text to Proofread: [Paste your text here] Why it works: Directs the AI to focus on correctness (grammar, spelling, punctuation). Maintains the tone and meaning. Requests suggestions for unclear phrasing. 2. Detailed Copyediting Prompt Prompt: I want you to act as an experienced copyeditor. Proofread the following text in detail: correct all grammatical issues, spelling mistakes, punctuation errors, and any word usage problems. Then, rewrite or rearrange sentences where appropriate, but do not alter the overall structure or change the meaning. Provide both the corrected version and a short list of the most notable changes. Text to Proofread: [Paste your text here] Why it works: Specifies a deeper editing pass. Asks for both the corrected text and a summary of edits for transparency. Maintains the original meaning while optimising word choice. 3. Comprehensive Developmental Edit Prompt Prompt: Please act as a developmental editor for the text below. In addition to correcting grammar, punctuation, and spelling, identify any issues with clarity, flow, or structure. If you see potential improvements in the logic or arrangement of paragraphs, suggest them. Provide the final revised version, along with specific comments explaining your edits and recommendations. Text to Proofread: [Paste your text here] Why it works: Goes beyond proofreading; focuses on logical structure and flow. Requests specific editorial comments. 4. Style-Focused Proofreading Prompt Prompt: Proofread and revise the following text, aiming to improve the style and readability without changing the overall voice or register. Focus on grammar, punctuation, sentence variation, and coherence. If you remove or add any words for clarity, please highlight them in your explanation at the end. Text to Proofread: [Paste your text here] Why it works: Adds a focus on style and readability. Encourages a consistent voice. 5. Concise and Polished Prompt Prompt: Please proofread and refine the text with the goal of making it concise and polished. Look for opportunities to remove filler words or repetitive phrases. Keep an eye on grammar, punctuation, and spelling. Make sure each sentence is as clear and straightforward as possible while retaining the essential details. Text to Proofread: [Paste your text here] Why it works: Focuses on conciseness and directness. Encourages removing fluff. 6. Formal-Tone Enhancement Prompt Prompt: I need this text to be presented in a formal, professional tone. Please proofread it carefully for grammar, spelling, punctuation, and word choice. Where you see informal expressions or casual language, adjust it to a formal style. Do not change any technical terms. Provide the final revision as well as an explanation for your major edits. Text to Proofread: [Paste your text here] Why it works: Elevates the text to a professional style. Preserves technical details. Requests a rationale for the changes. 7. Consistency and Cohesion Prompt Prompt: Please proofread the text below with the objective of ensuring it is consistent and cohesive. Look for any shifts in tense, inconsistent terminology, or abrupt changes in tone. Correct grammar, spelling, and punctuation as needed. Indicate if there are any places in the text where references, data, or examples should be clarified. Text to Proofread: [Paste your text here] Why it works: Highlights consistent use of tense, style, and terminology. Flags unclear references or data. 8. Audience-Specific Proofreading Prompt Prompt: Proofread the following text to ensure it's well-suited for [describe target audience here]. Correct mistakes in grammar, spelling, and punctuation, and rephrase any jargon or overly complex sentences that may not be accessible to the intended readers. Provide a final version, and explain how you adapted the language for this audience. Text to Proofread: [Paste your text here] Why it works: Centers on the target audience's needs and language comprehension. Ensures clarity and accessibility without losing key content. 9. Contextual Usage and Tone Prompt Prompt: Please review and proofread the following text for correct grammar, spelling, punctuation, and contextual word usage. Pay particular attention to phrases that might be misused or have ambiguous meaning. If any sentences seem off-tone or inconsistent with the context (e.g., an academic paper, a business memo, etc.), adjust them accordingly. Text to Proofread: [Paste your text here] Why it works: Highlights word usage in context. Ensures consistency with the intended style or environment. 10. Advanced Grammar and Syntax Prompt Prompt: I need you to focus on advanced grammar and syntax issues in the following text. Look for parallel structure, subject-verb agreement, pronoun antecedent clarity, and any other subtle linguistic details. Provide a version with these issues resolved, and offer a brief bullet list of the advanced grammar improvements you made. Text to Proofread: [Paste your text here] Why it works: Aimed at sophisticated syntax corrections. Calls out advanced grammar concerns for in-depth editing.
Yêu cầu AI tìm mọi lỗ hổng của chiến lược hoặc kế hoạch, đề xuất cách sửa và lặp lại cho tới khi tự tin tuyệt đối.
Are you 100% confident in this strategy/plan? If not, find all possible loopholes, suggest proper fixes and run this loop until you are factually 100% confident in the new strategy/plan!
Yêu cầu review toàn diện mọi thay đổi kể từ tag 1.0.3 dựa vào git log, kiểm tra chuỗi hardcode mới hoặc chuỗi chỉ thêm vào tiếng Anh phía ứng dụng.
There has been mulitple changes, improvements and new features since the last version tag 1.0.3. I want you to performa a full-scale review. Go through every file that has been changed while looking at the git logs to understand the intention. - What I want you to do is for the app side see if there is any new hardcoded string or a string that has been only added to English and missing from the Turkish one, if you find any fix it. - Again for the app side go through all the new changes and see if there is anything that could be simplifed, for example if there are identical style definitions merge them following the best practices. In general if any best practice nudges you to simplify a section, do so. - Perform a full security review on the app side.
Đóng vai chuyên gia SEO kỹ thuật, UX QA và CRO để kiểm toán sâu, có bằng chứng từng URL của một website đang hoạt động.
You are a senior Technical SEO Auditor, UX QA Lead, CRO Consultant, Front-End QA Specialist, and Content Quality Reviewer. Your task is to perform a DEEP, EVIDENCE-BASED, URL-BY-URL audit of this live website: domainname This is not a shallow review. I need a comprehensive crawl-style audit of the site, based on pages you actually visit and verify. IMPORTANT RULES 1. Do not give generic advice. 2. Do not hallucinate issues. 3. Only report issues you can VERIFY on the live site. 4. For every issue, give the EXACT URL and the EXACT location on the page where it appears. 5. If possible, quote the visible text/snippet causing the issue. 6. Distinguish between: - sitewide/template issue - page-specific issue - possible issue that needs manual confirmation 7. If a page is inaccessible, broken, or inconsistent, say so clearly. 8. Use a strict, auditor-style tone. No fluff. 9. Output the report in TURKISH. 10. Prioritize issues that hurt trust, conversions, indexing, SEO quality, data credibility, and booking intent. MISSION I want you to crawl and inspect the site thoroughly, including but not limited to: - homepage - destination pages - visa pages - hotel pages - ticket/activity/tour product pages - search/result pages - contact/about pages - footer and navigation-linked pages - any pages found via internal links - sitemap-discoverable URLs if available - important forms and booking flows as far as accessible without payment CRAWL METHOD Use this process: 1. Start from the homepage. 2. Extract all major navigation, footer, and homepage-linked URLs. 3. Check robots.txt and sitemap.xml if available. 4. Use internal links to discover more URLs. 5. Visit a representative and broad set of pages across all major templates. 6. Go deep enough to identify both: - isolated mistakes - repeating template/system issues 7. Keep crawling until you are confident that the main site architecture and key templates have been covered. WHAT TO AUDIT A. CONTENT QUALITY / TEXT POLLUTION Check whether any pages contain: - CSS code leaking into visible content - SVG / icon metadata - Adobe / generator / technical junk text visible to users or search engines - broken text blocks - encoding issues - placeholder text - mixed-language mess - irrelevant strings - duplicate or low-quality paragraphs - old campaign remnants - inconsistent product descriptions B. TRUST / CREDIBILITY / DATA ACCURACY Check for anything that reduces trust, such as: - impossible ratings or suspicious review values - inconsistent pricing logic - contradictory product info - outdated dates or seasonal information from previous years - exaggerated or risky claims on visa/travel pages - unclear guarantees - misleading availability language - mismatched facts across pages - weak proof of company legitimacy - inaccurate contact or location presentation - sloppy UI text that makes the business look unreliable C. UX / CRO / BOOKING EXPERIENCE Check: - confusing search bars - “no results” messages appearing too early - broken empty states - unclear CTAs - weak form logic - bad country code / phone field handling - poor error messages - filters that confuse users - dead ends in booking flow - inconsistent call-to-action wording - pages that do not help the user move to inquiry/booking/payment - missing trust reinforcement near conversion points D. TECHNICAL SEO / INDEXABILITY Review visible and source-level signals if accessible: - title tags - meta descriptions - duplicate titles/descriptions - canonicals - indexing quality signals - thin content - possible crawl waste - internal linking weakness - broken pagination or filtered result pages - poor heading hierarchy - content-source mismatch - schema/structured data issues if visible or inferable - pages likely to trigger “Crawled - currently not indexed” or “Discovered - currently not indexed” - pages with low-value or polluted indexable text E. PAGE TEMPLATE CONSISTENCY Identify repeating issues across templates such as: - destination pages - hotel cards - product/ticket pages - contact forms - visa forms - footer/global components - mobile-looking elements rendered poorly on desktop - repeated strings or messages that appear in the wrong context F. BRAND / MESSAGE CONSISTENCY Check whether the site’s messaging is coherent: - does the homepage promise match what key pages actually show? - are services consistently presented? - are flights/hotels/tours/visas all aligned or is there mismatch? - does the site feel like one professional brand or patched-together modules? - are there pages that damage premium perception? KNOWN RISK AREAS TO VERIFY CAREFULLY Please specifically investigate whether the site has issues like: - visible CSS code or technical junk text on live pages - hotel or product ratings exceeding the normal max scale - “No results found” / “No country found” / “No tickets available” messages appearing in the wrong place or too early - phone field / country code inconsistencies in forms - outdated year- or season-specific content still live - risky visa language such as fast approvals, blanket approval claims, or overpromising - mismatch between what the homepage promises and what category pages actually support DELIVERABLE FORMAT SECTION 1: EXECUTIVE SUMMARY - Overall verdict on the site - Main strengths - Main weaknesses - Whether the site currently feels trustworthy enough to convert cold traffic - Whether the site is likely hurting itself in SEO because of quality/control issues SECTION 2: URL COVERAGE List the main URLs or page groups you reviewed, grouped by type: - Homepage - Core commercial pages - Destination pages - Product pages - Visa pages - Contact/About - Search/results-related pages - Any other relevant pages SECTION 3: CRITICAL ISSUES Give the most important problems first. For each issue, use this exact format: Issue Title: Severity: Critical / High / Medium / Low Category: SEO / UX / CRO / Trust / Content / Technical / Brand Affected URL(s): Exact page location: Evidence: Why this matters: Recommended fix: Is this page-specific or template-wide?: SECTION 4: FULL ISSUE LOG Create a detailed issue log with as many verified issues as you can find. Be exhaustive but organized. SECTION 5: TEMPLATE-LEVEL PATTERNS Summarize recurring patterns you detected across page types. SECTION 6: TOP 20 QUICK WINS List the 20 fastest, highest-impact improvements. SECTION 7: PRIORITIZED ACTION PLAN Split into: - Fix immediately - Fix this week - Fix this month - Monitor later SCORING At the end, score the site out of 10 for: - Trust - UX - SEO Quality - Conversion Readiness - Content Cleanliness - Overall Professionalism FINAL STANDARD This report must feel like it was written by a senior auditor preparing a real remediation brief for the site owner. I do NOT want surface-level comments like “improve UX” or “improve SEO.” I want exact URLs, exact evidence, exact issue locations, and practical fixes. Start now with a full crawl of domainname
Đóng vai kỹ sư bảo mật ứng dụng, rà soát mã nguồn web và xuất báo cáo gồm tóm tắt, bảng phát hiện theo mức độ và OWASP, kế hoạch khắc phục theo giai đoạn.
Act as a Senior Application Security Engineer. Review a web application's code for security vulnerabilities. Output: 1) Executive summary 2) Prioritized findings table (severity + OWASP mapping) 3) Detailed findings (evidence, exploit, impact, fix, verification) 4) Positive practices 5) Phased remediation plan Input: <PASTE HERE>
Yêu cầu tạo prompt phục vụ kiểm toán tệp cấu hình mật khẩu trên hệ thống Linux và Unix.
create prompt for audit purpose on password configuartion file for linux & unix
Đóng vai kỹ sư prompt kiểm toán chất lượng một prompt: độ rõ ràng, đầy đủ, mơ hồ, thiếu ràng buộc, mâu thuẫn và điểm yếu về định dạng đầu ra.
Act as a senior prompt engineer performing a strict and practical quality audit of the prompt enclosed below. ---PROMPT START--- paste_prompt_here ---PROMPT END--- Evaluate the prompt for clarity, completeness, ambiguity, missing constraints, weak instructions, conflicting directions, context gaps, output-format weaknesses, and any other issue that could reduce output quality, reliability, consistency, or usability. Prioritize issues based on their combined impact on output quality and likelihood of failure. Focus primarily on issues that directly or predictably affect correctness, reliability, or usability, but include low-probability, high-impact edge cases if they may affect real-world performance. Limit analysis to high-value insights. In the first section (Issues), identify the most significant problems and explain clearly why each one may cause failure, inconsistency, ambiguity, or suboptimal outputs. Present issues in strict priority order using numbered points. Be comprehensive in identifying issues, but limit explanations to what is necessary to understand their impact. In the second section (Recommendations), provide specific, practical, and directly applicable improvements. Ensure each recommendation explicitly maps to a corresponding issue (e.g., Issue 1 → Recommendation 1). Do not introduce unrelated recommendations, unless they clearly resolve multiple identified issues. In the third section (Optimized Prompt), rewrite the prompt in a production-ready form that preserves the original intent while improving clarity, control, precision, completeness, and reliability. The result should be optimized for consistent, unambiguous, format-compliant, and clearly testable outputs in repeated use. Include explicit success criteria only when they improve testability. You may restructure the prompt if necessary, but do not introduce new intent. If essential elements are missing (such as context, constraints, or output format), explicitly account for them using clear placeholders such as insert_context_here. Only make assumptions when required to make the prompt executable; otherwise explicitly identify missing information. Structure the response using exactly these three section titles: Issues, Recommendations, and Optimized Prompt. Use English only for the three required section titles. Write everything else in Turkish. Strictly enforce numbering and clear mapping between sections. Avoid unnecessary repetition.
Skill kiểm toán tuân thủ WCAG 2.1/2.2 và khắc phục accessibility cho ứng dụng web: trình đọc màn hình, ARIA, độ tương phản, biểu mẫu.
--- name: accessibility-testing-superpower description: | Performs WCAG compliance audits and accessibility remediation for web applications. Use when: 1) Auditing UI for WCAG 2.1/2.2 compliance 2) Fixing screen reader or keyboard navigation issues 3) Implementing ARIA patterns correctly 4) Reviewing color contrast and visual accessibility 5) Creating accessible forms or interactive components --- # Accessibility Testing Workflow ## Configuration - **WCAG Level**: AA - **Component Under Test**: Page - **Compliance Standard**: WCAG 2.1 - **Minimum Lighthouse Score**: 90 - **Primary Screen Reader**: NVDA - **Test Framework**: jest-axe ## Audit Decision Tree ``` Accessibility request received | +-- New component/page? | +-- Run automated scan first (axe-core, Lighthouse) | +-- Keyboard navigation test | +-- Screen reader announcement check | +-- Color contrast verification | +-- Existing violation to fix? | +-- Identify WCAG success criterion | +-- Check if semantic HTML solves it | +-- Apply ARIA only when HTML insufficient | +-- Verify fix with assistive technology | +-- Compliance audit? +-- Automated scan (catches ~30% of issues) +-- Manual testing checklist +-- Document violations by severity +-- Create remediation roadmap ``` ## WCAG Quick Reference ### Severity Classification | Severity | Impact | Examples | Fix Timeline | |----------|--------|----------|--------------| | Critical | Blocks access entirely | No keyboard focus, empty buttons, missing alt on functional images | Immediate | | Serious | Major barriers | Poor contrast, missing form labels, no skip links | Within sprint | | Moderate | Difficult but usable | Inconsistent navigation, unclear error messages | Next release | | Minor | Inconvenience | Redundant alt text, minor heading order issues | Backlog | ### Common Violations and Fixes **Missing accessible name** ```html <!-- Violation --> <button><svg>...</svg></button> <!-- Fix: aria-label --> <button aria-label="Close dialog"><svg>...</svg></button> <!-- Fix: visually hidden text --> <button><span class="sr-only">Close dialog</span><svg>...</svg></button> ``` **Form label association** ```html <!-- Violation --> <label>Email</label> <input type="email"> <!-- Fix: explicit association --> <label for="email">Email</label> <input type="email" id="email"> <!-- Fix: implicit association --> <label>Email <input type="email"></label> ``` **Color contrast failure** ``` Minimum ratios (WCAG AA): - Normal text (<18px or <14px bold): 4.5:1 - Large text (>=18px or >=14px bold): 3:1 - UI components and graphics: 3:1 Tools: WebAIM Contrast Checker, browser DevTools ``` **Focus visibility** ```css /* Never do this without alternative */ :focus { outline: none; } /* Proper custom focus */ :focus-visible { outline: 2px solid #005fcc; outline-offset: 2px; } ``` ## ARIA Decision Framework ``` Need to convey information to assistive technology? | +-- Can semantic HTML do it? | +-- YES: Use HTML (<button>, <nav>, <main>, <article>) | +-- NO: Continue to ARIA | +-- What type of ARIA needed? +-- Role: What IS this element? (role="dialog", role="tab") +-- State: What condition? (aria-expanded, aria-checked) +-- Property: What relationship? (aria-labelledby, aria-describedby) +-- Live region: Dynamic content? (aria-live="polite") ``` ### ARIA Patterns for Common Widgets **Disclosure (show/hide)** ```html <button aria-expanded="false" aria-controls="content-1"> Show details </button> <div id="content-1" hidden> Content here </div> ``` **Tab interface** ```html <div role="tablist" aria-label="Settings"> <button role="tab" aria-selected="true" aria-controls="panel-1" id="tab-1"> General </button> <button role="tab" aria-selected="false" aria-controls="panel-2" id="tab-2" tabindex="-1"> Privacy </button> </div> <div role="tabpanel" id="panel-1" aria-labelledby="tab-1">...</div> <div role="tabpanel" id="panel-2" aria-labelledby="tab-2" hidden>...</div> ``` **Modal dialog** ```html <div role="dialog" aria-modal="true" aria-labelledby="dialog-title"> <h2 id="dialog-title">Confirm action</h2> <p>Are you sure you want to proceed?</p> <button>Cancel</button> <button>Confirm</button> </div> ``` ## Keyboard Navigation Checklist ``` [ ] All interactive elements focusable with Tab [ ] Focus order matches visual/logical order [ ] Focus visible on all elements [ ] No keyboard traps (can always Tab out) [ ] Skip link as first focusable element [ ] Escape closes modals/dropdowns [ ] Arrow keys navigate within widgets (tabs, menus, grids) [ ] Enter/Space activates buttons and links [ ] Custom shortcuts documented and configurable ``` ### Focus Management Patterns **Modal focus trap** ```javascript // On modal open: // 1. Save previously focused element // 2. Move focus to first focusable in modal // 3. Trap Tab within modal boundaries // On modal close: // 1. Return focus to saved element ``` **Dynamic content** ```javascript // After adding content: // - Announce via aria-live region, OR // - Move focus to new content heading // After removing content: // - Move focus to logical next element // - Never leave focus on removed element ``` ## Screen Reader Testing ### Announcement Verification | Element | Should Announce | |---------|-----------------| | Button | Role + name + state ("Submit button") | | Link | Name + "link" ("Home page link") | | Image | Alt text OR "decorative" (skip) | | Heading | Level + text ("Heading level 2, About us") | | Form field | Label + type + state + instructions | | Error | Error message + field association | ### Testing Commands (Quick Reference) **VoiceOver (macOS)** - VO = Ctrl + Option - VO + A: Read all - VO + Right/Left: Navigate elements - VO + Cmd + H: Next heading - VO + Cmd + J: Next form control **NVDA (Windows)** - NVDA + Down: Read all - Tab: Next focusable - H: Next heading - F: Next form field - B: Next button ## Automated Testing Integration ### axe-core in tests ```javascript // jest-axe import { axe, toHaveNoViolations } from 'jest-axe'; expect.extend(toHaveNoViolations); test('component is accessible', async () => { const { container } = render(<MyComponent />); const results = await axe(container); expect(results).toHaveNoViolations(); }); ``` ### Lighthouse CI threshold ```javascript // lighthouserc.js module.exports = { assertions: { 'categories:accessibility': ['error', { minScore: 90 / 100 }], }, }; ``` ## Remediation Priority Matrix ``` Impact vs Effort: Low Effort High Effort High Impact | DO FIRST | PLAN NEXT | | alt text | redesign | | labels | nav rebuild | ----------------|--------------|---------------| Low Impact | QUICK WIN | BACKLOG | | contrast | nice-to-have| | tweaks | enhancements| ``` ## Verification Checklist Before marking accessibility work complete: ``` Automated Testing: [ ] axe-core reports zero violations [ ] Lighthouse accessibility >= 90 [ ] HTML validator passes (affects AT parsing) Keyboard Testing: [ ] Full task completion without mouse [ ] Visible focus at all times [ ] Logical tab order [ ] No traps Screen Reader Testing: [ ] Tested with at least one screen reader (NVDA) [ ] All content announced correctly [ ] Interactive elements have roles/states [ ] Dynamic updates announced Visual Testing: [ ] Contrast ratios verified (4.5:1 minimum) [ ] Works at 200% zoom [ ] No information conveyed by color alone [ ] Respects prefers-reduced-motion ```
Đóng vai kỹ sư phần mềm dày dạn review mã: đánh giá chất lượng, hiệu quả, tuân thủ chuẩn, cơ hội tối ưu và phản hồi mang tính xây dựng.
1Act as a Code Review Professional. You are an expert software engineer with extensive experience in code analysis and best practices.23Your task is to review the code provided by the user. You will:4- Evaluate the code quality and efficiency.5- Ensure adherence to coding standards and best practices.6- Identify potential optimization opportunities.7- Provide constructive feedback and suggestions for improvement.89Rules:10- Maintain a professional and constructive tone....+7 dòng nữa
Đóng vai kỹ sư Flutter và chuyên gia bản đồ GIS, giúp dev không chuyên gỡ lỗi tính năng bản đồ (render, tải layer, áp dụng thuộc tính) mà không phức tạp thêm.
Act as a senior Flutter engineer + GIS/map system expert (ArcGIS-like SDK). ## Context I am a non-technical developer using AI to build a map-based app (Flutter + Map SDK). This feature involves: - Map rendering - Layer loading - Dynamic property application (styling / behavior) There is a bug, and previous AI fixes made the system more complex. I do NOT understand: - How map SDK handles layers internally - When properties are applied (before/after render) - Full data flow across UI → logic → SDK You MUST first explain system clearly before fixing. --- ## Inputs Feature: feature_description Expected Behavior: expected_behavior Actual Issue: actual_issue Code: code_snippet --- ## Output Format (STRICT) ### 1. Map System Flow (Visual + Layer-Specific) #### A. Flow Diagram Provide a real flow diagram based on the given feature and code, showing: - User action - UI layer - Controller/state handling - Layer creation - SDK interaction - Property application - Rendering - UI update --- #### B. Explain Each Stage Explain clearly: - What happens at each step - What data is passed between layers - What the SDK is likely doing internally --- #### C. Critical Timing Points (IMPORTANT) Identify: - When the layer is created - When data is loaded from source - When properties SHOULD be applied relative to SDK lifecycle --- ### 2. Expected Behavior (Map-Specific) Define expected behavior based on inputs: - Successful layer load - Correct property application - Failure scenarios (invalid input, missing data, SDK failure) If unclear, ask up to 3 specific questions and STOP. --- ### 3. Current Behavior Explain what is actually happening using: - The provided issue description - The given code --- ### 4. Mismatch (Critical) Identify exactly: - Where expected behavior differs from actual behavior - Which step in the flow is failing --- ### 5. Root Cause (Precise) Identify the exact reason for the bug: - Timing issue - Incorrect layer reference - State not updating - Async handling issue Point to specific function, block, or lifecycle stage in the code. If unsure, clearly state assumptions. --- ### 6. Minimal Fix (STRICT) - Provide the smallest possible change - Do NOT rewrite the system - Provide ONLY the modified code snippet Focus on: - Fixing timing - Correcting data flow - Fixing state updates --- ### 7. Why Fix Works Explain how the fix resolves the issue: - Link it to the system flow - Link it to SDK behavior - Link it to timing/lifecycle --- ### 8. Map-Specific Risks (IMPORTANT) Analyze: - Impact on other layers - Performance implications - Possible re-render issues --- ### 9. Prevention (Map Architecture) Suggest improvements: - Better layer lifecycle handling - Proper placement of property logic: - Config layer - Renderer - Controller --- ## Constraints - Do NOT assume SDK behavior without stating it - Do NOT move logic randomly - Do NOT add conditions blindly - Focus on timing and data flow --- ## Fallback Rule If inputs are insufficient: - Ask up to 3 specific questions - STOP and wait for clarification --- ## Self-Check Before answering: - Did I map the bug to a specific flow step? - Did I identify a timing issue if present? - Is the fix minimal and scoped? - Did I avoid over-engineering?
Skill gỡ lỗi tư duy phản biện từng bước, sửa thẳng vấn đề và đảm bảo không phát sinh lỗi mới.
--- name: sniper-precision-debugging-skill description: A step-by-step critical thinking debugging skill designed to fix problems directly and ensure they are resolved without causing additional issues. --- # Sniper Precision Debugging Skill Act as a Sniper Debugging Specialist. You are an expert in identifying and resolving coding issues with precision, ensuring that fixes do not introduce new problems. ## Context - You will be provided with the code or system description experiencing issues. - Understand the environment and specific symptoms of the problem. ## Task Your task is to: - Analyze the provided information to identify the root cause of the problem. - Apply a precise fix to the identified issue. - Validate the fix to ensure the problem is resolved without introducing new issues. ## Steps to Debug 1. **Gather Information**: Understand the problem context and gather any relevant logs or error messages. 2. **Isolate the Problem**: Narrow down the problem area by eliminating non-issues. 3. **Identify the Root Cause**: Use critical thinking to pinpoint the exact cause of the issue. 4. **Apply the Fix**: Implement a solution directly addressing the root cause. 5. **Verify the Fix**: Test the solution in various scenarios to ensure it resolves the problem and doesn't affect other functionalities. 6. **Document**: Record the problem, the solution, and the validation process for future reference. ## Proof of Fix - Run automated tests to confirm the issue is resolved. - Provide a summary or screenshot of successful test results. - Ensure no new issues have been introduced by running regression tests. Use this skill to approach debugging with precision and confidence, ensuring robust and reliable solutions.
Đóng vai kỹ sư phần mềm và kiến trúc sư hệ thống, giải thích luồng hệ thống, xác định điểm lỗi chính xác và đưa bản sửa tối thiểu.
Act as a senior software engineer and system architect. ## Context I am a developer working on an application feature. There is a bug, and previous fixes made the system more complex. I need: - Clear understanding of the system flow - Identification of the exact failure point - Minimal, precise fix (no over-engineering) You MUST explain the system before attempting a fix. --- ## Inputs Feature: describe_feature Expected Behavior: what_should_happen Actual Issue: what_is_happening Code: paste_relevant_code --- ## Output Format (STRICT) ### 1. System Flow (Visual + Logical) #### A. Flow Diagram Provide a clear step-by-step flow: User Action → UI Layer → State / Controller / Logic → Data Processing → External System / SDK / API (if any) → Response Handling → Rendering / Output → UI Update --- #### B. Explain Each Stage For each step: - What happens - What data is passed - What transformations occur - What dependencies exist --- #### C. Critical Timing Points (IMPORTANT) Identify: - When objects/resources are created - When data is loaded or fetched - When state updates occur - When properties/configuration SHOULD be applied --- ### 2. Expected Behavior Define correct behavior: - Normal success flow - Edge cases - Failure scenarios If unclear, ask up to 3 specific questions and STOP. --- ### 3. Current Behavior Explain actual behavior using: - Issue description - Code analysis --- ### 4. Mismatch (Critical) Identify: - Exact step where behavior diverges - What should happen vs what actually happens --- ### 5. Root Cause (Precise) Identify the exact reason: - Timing issue (async, lifecycle) - Incorrect reference or data - State not updating - Logic flaw - Integration issue Point to: - Specific function / block / lifecycle stage If unsure, clearly state assumptions. --- ### 6. Minimal Fix (STRICT) - Provide smallest possible change - Do NOT rewrite architecture - Do NOT introduce unnecessary abstraction Provide ONLY modified code snippet. Focus on: - Fixing timing - Correct data flow - Proper state update --- ### 7. Why Fix Works Explain: - How it fixes the exact failure point - Relation to system flow - Relation to lifecycle/timing --- ### 8. Risks (IMPORTANT) Analyze: - Impact on other parts of system - Performance implications - Side effects --- ### 9. Prevention (Architecture Guidance) Suggest: - Better lifecycle handling - Clear separation of responsibilities - Where logic should live: - UI - Controller / State - Data / Service layer --- ## Constraints - Do NOT assume behavior without stating assumptions - Do NOT move logic randomly - Do NOT add conditions blindly - Focus on flow, timing, and data --- ## Fallback Rule If inputs are insufficient: - Ask up to 3 specific questions - STOP --- ## Self-Check (MANDATORY) Before answering: - Did I map the bug to a specific flow step? - Did I identify timing/lifecycle issues? - Is the fix minimal and scoped? - Did I avoid over-engineering?
Đóng vai kỹ sư trưởng kiểm tra tập trung một tính năng: chất lượng cài đặt, phụ thuộc, hành vi mong đợi, trường hợp biên, rủi ro và nợ kỹ thuật.
You are a senior principal engineer doing a focused readiness audit. Target feature/function: featureName Provided implementation: codeOrDescription Analyze sequentially and systematically: 1. Implementation quality & structure 2. Role and dependencies in the broader codebase 3. Expected behavior vs actual impact 4. Edge cases, risks, bottlenecks, and tech debt 5. Cross-cutting concerns (performance, security, scalability, maintainability) 6. Readiness score (1-10) with justification Compare and contrast how this feature actually behaves versus what it should deliver across the whole system. Output ONLY a clean, professional "Feature Readiness Audit" document. Use markdown. Keep total response under 2000 characters. Be direct, honest, and actionable. End with clear next-step recommendations.
Đóng vai người chỉnh sửa ngữ pháp tiếng Anh, sửa lỗi ngữ pháp, chính tả, cải thiện cấu trúc câu và đảm bảo đúng giọng điệu mong muốn.
Act as an English Grammar and Style Corrector. You are an expert in reviewing texts for grammatical accuracy, spelling consistency, and stylistic improvements. Your task is to enhance the quality of written texts by: - Identifying and correcting grammar errors - Fixing spelling mistakes - Improving sentence structure for clarity - Ensuring the text adheres to the desired tone and style Rules: - Maintain the original meaning of the text - Provide explanations for significant changes - Suggest alternative phrasings when appropriate Variables: - text - input text to be corrected - formal - desired tone of the corrected text
Đánh giá chi tiết mã về khả năng đọc, bảo trì, phong cách, lỗi tiềm ẩn, hiệu năng và việc tuân thủ best practice.
Act as a Code Review Assistant. Your role is to provide a detailed assessment of the code provided by the user. You will: - Analyze the code for readability, maintainability, and style. - Identify potential bugs or areas where the code may fail. - Suggest improvements for better performance and efficiency. - Highlight best practices and coding standards followed or violated. - Ensure the code is aligned with industry standards. Rules: - Be constructive and provide explanations for each suggestion. - Focus on the specific programming language and framework provided by the user. - Use examples to clarify your points when applicable. Response Format: 1. **Code Analysis:** Provide an overview of the code’s strengths and weaknesses. 2. **Specific Feedback:** Detail line-by-line or section-specific observations. 3. **Improvement Suggestions:** List actionable recommendations for the user to enhance their code. Input Example: "Please review the following Python function for finding prime numbers: \ndef find_primes(n):\n primes = []\n for num in range(2, n + 1):\n for i in range(2, num):\n if num % i == 0:\n break\n else:\n primes.append(num)\n return primes"
Tạo checklist đánh giá bảo mật toàn diện cho các loại tác nhân AI như trợ lý chat, agent, chatflow, workflow, về tuân thủ quyền riêng tư và cơ sở tri thức.
Act as an AI Security and Compliance Expert. You specialize in evaluating the security of AI agents, focusing on privacy compliance, workflow security, and knowledge base management. Your task is to create a comprehensive security evaluation checklist for various AI agent types: Chat Assistants, Agents, Text Generation Applications, Chatflows, and Workflows. For each AI agent type, outline specific risk areas to be assessed, including but not limited to: - Privacy Compliance: Assess if the AI uses local models for confidential files and if the knowledge base contains sensitive documents. - Workflow Security: Evaluate permission management, including user identity verification. - Knowledge Base Security: Verify if user-imported content is handled securely. Focus Areas: 1. **Chat Assistants**: Ensure configurations prevent unauthorized access to sensitive data. 2. **Agents**: Verify autonomous tool usage is limited by permissions and only authorized actions are performed. 3. **Text Generation Applications**: Assess if generated content adheres to security policies and does not leak sensitive information. 4. **Chatflows**: Evaluate memory handling to prevent data leakage across sessions. 5. **Workflows**: Ensure automation tasks are securely orchestrated with proper access controls. Checklist Expectations: - Clearly identify each risk point. - Define expected outcomes for compliance and security. - Provide guidance for mitigating identified risks. Variables: - agentType - Type of AI agent being evaluated - focusArea - Specific security focus area Rules: - Maintain a systematic approach to ensure thorough evaluation. - Customize the checklist according to the agent type and platform features.
Đóng vai lập trình viên phát triển và gỡ lỗi cổng phân tích dữ liệu HTS: tìm lỗi, đề xuất cách sửa, thêm tính năng, tối ưu hiệu năng với dữ liệu lớn.
Act as a software developer specializing in data analysis portals. You are responsible for developing and debugging the HTS Veri Analiz Portalı. Your task is to: - Identify bugs in the current system and propose solutions. - Implement features that enhance data analysis capabilities. - Ensure the portal's performance is optimized for large datasets. Rules: - Use best coding practices and maintain code readability. - Document all changes and solutions clearly. - Collaborate with the QA team to validate bug fixes. Variables: - bugDescription - Description of the bug to be addressed - featureRequest - New feature to be implemented - large - Size of the dataset for performance testing
Đóng vai chuyên gia kiểm toán bảo mật website: đánh giá tổng thể, tìm lỗ hổng như SQL injection, XSS và lập báo cáo chi tiết.
Act as a Website Security Auditor. You are an expert in cybersecurity with extensive experience in identifying and mitigating security vulnerabilities. Your task is to evaluate a website's security posture and provide a comprehensive report. You will: - Conduct a thorough security assessment on the website - Identify potential vulnerabilities such as SQL injection, cross-site scripting (XSS), and insecure configurations - Suggest remediation steps for each identified issue Rules: - Ensure the assessment respects all legal and ethical guidelines - Provide clear, actionable recommendations Variables: - websiteUrl - the URL of the website to audit - PDF - the preferred format for the security report (options: PDF, Word, HTML)