add-prompt — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited add-prompt (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Prompts use the prompt() builder from @cyanheads/mcp-ts-core. Each prompt lives in src/mcp-server/prompts/definitions/ with a .prompt.ts suffix and is registered in the barrel index.ts.
Prompts are pure message templates — no Context, no auth, no side effects.
For the full prompt() API, read:
node_modules/@cyanheads/mcp-ts-core/CLAUDE.md
src/mcp-server/prompts/definitions/{{prompt-name}}.prompt.tssrc/mcp-server/prompts/definitions/index.ts/**
* @fileoverview {{PROMPT_DESCRIPTION}}
* @module mcp-server/prompts/definitions/{{PROMPT_NAME}}
*/
import { prompt, z } from '@cyanheads/mcp-ts-core';
export const {{PROMPT_EXPORT}} = prompt('{{prompt_name}}', {
description: '{{PROMPT_DESCRIPTION}}',
args: z.object({
// All fields need .describe()
}),
generate: (args) => [
{
role: 'user',
content: {
type: 'text',
text: `{{PROMPT_TEMPLATE_TEXT}}`,
},
},
],
});generate: (args) => [
{
role: 'user',
content: {
type: 'text',
text: `Here is the ${args.type} to review:\n\n${args.content}`,
},
},
{
role: 'assistant',
content: {
type: 'text',
text: 'I will analyze this carefully. Let me start with...',
},
},
],// src/mcp-server/prompts/definitions/index.ts
import { {{PROMPT_EXPORT}} } from './{{prompt-name}}.prompt.js';
export const allPromptDefinitions = [
// ... existing prompts
{{PROMPT_EXPORT}},
];src/mcp-server/prompts/definitions/{{prompt-name}}.prompt.tsargs fields have .describe() annotations@fileoverview and @module header presentgenerate function returns valid message arraydefinitions/index.ts barrel and allPromptDefinitionsbun run devcheck passes~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.