security-audit
Security Audit and Penetration Testing Instructions
Perform comprehensive security testing of the KMP application using both static code analysis and dynamic terminal-based testing.
Application Context
- Stack: CakePHP 5.x backend, Stimulus.js frontend, MySQL database
- Application URL:
http://localhost:8080 - Test Password:
TestPassword(for all dev users) - App Directory:
/workspaces/KMP/app - Reports Directory:
/workspaces/KMP/security-reports
Test User Credentials for Authorization Testing
- admin@amp.ansteorra.org - Super admin (full access)
- iris@ampdemo.com - Basic user (minimal permissions)
- bryce@ampdemo.com - Local Seneschal (moderate permissions)
- eirik@ampdemo.com - Kingdom Seneschal (elevated permissions)
More from ansteorra/kmp
beads
Manage plan tasks using the beads distributed, git-backed graph issue tracker. Supports creating, updating, closing tasks, managing dependencies, and syncing with git.
10refactor
Surgical code refactoring to improve maintainability without changing behavior. Covers extracting functions, renaming variables, breaking down god functions, improving type safety, eliminating code smells, and applying design patterns. Less drastic than repo-rebuilder; use for gradual improvements.
9pdf
Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When Claude needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale.
9gh-cli
GitHub CLI (gh) comprehensive reference for repositories, issues, pull requests, Actions, projects, releases, gists, codespaces, organizations, extensions, and all GitHub operations from the command line.
9install-skills
Automatically install and manage Agent Skills from GitHub repositories. Use when asked to "install a skill", "add a skill", "find skills", "browse skills", "get skills from GitHub", or when the user needs a specific capability that might exist as a community skill. Supports anthropics/skills, github/awesome-copilot, and custom GitHub repositories.
9webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
9