max-prompt — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited max-prompt (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Max Prompt translates partially expressed human intent into a prompt another capable agent can act on correctly.
Its job is not to make a request longer, more impressive, or more technical. Its job is to discover what the user is actually trying to accomplish, determine what kind of problem that is, ground the prompt in available evidence, expose consequential uncertainty, and express the idea in the language appropriate to that situation.
The invariant translation is:
Raw intent
-> intended outcome and why it matters
-> situation type and target executor
-> facts, evidence, assumptions, and unknowns
-> relevant mechanisms, ownership, and constraints
-> scoped execution approach
-> verification and definition of doneUI/UX is one possible branch. It is not the default ontology of the skill.
Use this skill when the user asks to:
It applies to any domain in which the recipient needs more than a paraphrase, including:
The examples above are seeds, not boundaries. Classify each new request from scratch.
Do not use Max Prompt when:
Do not silently execute the produced prompt. Deliver the prompt unless the user also asked for execution.
Max Prompt's worst failure is ornate wrongness: turning ambiguity into a polished, highly detailed specification whose details were never established and may point the executor in the wrong direction.
Guard against it by maintaining four distinct buckets while reasoning:
Never launder an assumption into a requirement. Never invent repository facts, user research, product behavior, legal rules, source claims, system topology, performance numbers, or creative preferences merely to make the prompt sound complete.
Ask a concise question only when the answer would materially change the objective, authorization, architecture, safety, audience, or deliverable. Otherwise proceed with a clearly labeled assumption or placeholder.
Before drafting, extract the following from the user's words and the surrounding conversation:
Preserve unusually revealing phrases from the user when they carry more intent than a generic substitute. Clean up the language without bleaching out the idea.
The amount of grounding should match the cost of being wrong.
Use companion skills when they are the natural grounding mechanism. For example, codebase mastery can establish system facts, web scouring can check unstable claims, and exhaustive mapping can establish a complete domain surface. Max Prompt composes grounded findings into the handoff; it does not pretend to have performed work it did not perform.
First classify the request. Use one primary lens and any genuinely relevant secondary lenses. Do not dump every lens into every prompt.
Translate the request into the language of:
For a bug, do not assert a cause unless it was established. Ask the executor to trace and prove it.
Translate the request into the language of:
Distinguish a static conceptual diagram from a live system and distinguish observation from control.
Translate the request into the language of:
Translate the request into the language of:
Do not encode the desired conclusion as though it were evidence.
Translate the request into the language of:
Do not let polish overwrite the user's actual voice or make unsupported claims more persuasive.
Translate the request into the language of:
Do not reduce a structural or state problem to visual polish. Do not prescribe a visual treatment merely because the user supplied a screenshot.
Translate the request into the language of:
Protect the felt intention while making the craft choices legible.
If none of these fits cleanly, derive a new lens from the domain instead of forcing the nearest template.
Read the whole supplied context. Identify the prize, the why, the felt signal, the non-negotiables, and the words worth preserving.
Determine what kind of work this is and who will perform it. A coding agent, a researcher, and a creative director need different kinds of completeness.
Separate known facts, supported inferences, assumptions, and open questions. Inspect or research when correctness requires it and the source is available.
Ask at most the few questions whose answers would change the shape or permission of the work. Do not interrogate the user for details the executor can safely discover.
Use the situational lens to identify the mechanisms, constraints, failure modes, and proof obligations that belong in this prompt. Omit irrelevant ceremony.
Write a prompt that tells the recipient:
For broad work, phase the prompt so discovery, proposal, implementation, and verification do not collapse into one uncontrolled operation.
Remove duplicated instructions, decorative jargon, and false precision. Keep enough rationale that the recipient understands why constraints exist and can make good local decisions.
Do not deliver until the prompt passes the tests below.
When the user wants something to paste into another agent, return the prompt first in a single copyable block. Add a short note after it only when assumptions, unresolved decisions, or grounding limitations need to be visible to the user.
Use this structure selectively, not mechanically:
[Task title]
Context
- What exists, what happened, and why this request matters.
Objective
- The outcome that must become true.
Ground truth and evidence
- Known facts, supplied artifacts, relevant paths/links, and observations.
Scope
- What the recipient should inspect, decide, create, or change.
Requirements
- Situation-specific behavior, mechanisms, qualities, and constraints.
Uncertainty and judgment
- Assumptions, open questions, hypotheses to test, and decisions left to the recipient.
Boundaries and non-goals
- What is not authorized or should remain unchanged.
Working method
- Required discovery, sequencing, checkpoints, and safety posture.
Verification and definition of done
- Observable evidence that proves the result is correct and complete.
Handoff
- Expected files, response shape, report, or operational state.Delete headings that add no value. Add domain-specific headings when they make the execution contract clearer.
These examples calibrate the reasoning moves. They are not the menu of allowed inputs, and their domain details must not leak into unrelated prompts.
Raw request:
The page feels chaotic when I scroll and the cards animate. Make a prompt for an agent to fix it.
The useful expansion does not simply request "smoother animations." It frames a product/UI investigation: identify all competing motion owners, trace scroll and card lifecycle behavior, establish which state has priority during user input, preserve natural scrolling, define interruption and cleanup rules, respect reduced motion, and verify across representative viewports. If the implementation has not been inspected, it asks the executor to find the actual ownership before changing code rather than naming a fabricated component.
Raw request:
I want a Factorio-like view where I can see my agents and data moving through my server live.
The useful expansion recognizes this as an observability product, not merely a dashboard skin. It defines the operator experience, distinguishes conceptual topology from live telemetry, identifies events and correlation IDs as the moving units, starts with a read-only vertical slice, covers privacy and trust boundaries, defines stale/degraded states, chooses where the service is hosted, and requires proof using a real end-to-end event. It does not claim the server already emits signals that have not been verified.
Raw request:
Research whether it makes sense for me to form a company overseas.
The useful expansion first identifies the personal decision, jurisdictions, residency, activity, time horizon, and constraints that materially change the answer. It requires current primary sources for legal and tax facts, separates factual comparison from professional advice, defines comparison criteria, surfaces uncertainty and hidden ongoing obligations, and asks for a decision-oriented synthesis. It does not convert the user's curiosity into a predetermined recommendation.
A Max Prompt run succeeds only if another capable recipient can answer all of these from the prompt:
It fails if the result:
If any failure condition is present, redo from the raw request: recover the prize, reclassify the situation, restore the evidence boundary, and rebuild only the justified execution contract.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.