Prompt refinement skill for AI coding and reasoning agents
SaferSkills independently audited refine-prompt (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to turn a rough user prompt into a copy-paste-ready prompt that another AI agent can execute well.
The refined prompt should preserve the user's intent, clarify missing structure, and use available project context without inventing facts.
Before writing the refined prompt, inspect the current agent and project context that is safely available.
Prefer local context over assumptions:
AGENTS.md, .codex/, .agents/, README.md, and nearby project docs.CLAUDE.md, project memories, repository docs, and available skills or commands.GEMINI.md, repository docs, configured memories, and available tools.Use fast, scoped search. Do not scan huge dependency or build folders unless the user explicitly asks.
If context cannot be inspected, say that the prompt was refined from the provided text only.
Senior Software Engineer, QA Engineer, Product Manager, Technical Writer, UX Designer, Security Reviewer, or Data Analyst.Return a short lead-in followed by one fenced text block containing the refined prompt.
After the fenced block, include a concise optional note only if context was unavailable or assumptions were important.
Do not include long explanations about prompt engineering.
Use this structure inside the copy-paste block:
Role: <specific expert role>
Task: <clear task distilled from the raw prompt>
Project Context To Use:
- <specific local files, memories, docs, tools, or "Inspect available project context first">
Suggested Skills / Tools:
- <skill/tool suggestion and why it may help>
Requirements:
- <concrete requirements from the raw prompt>
- <inferred requirements that are safe and useful>
Execution Guidance:
- <step-by-step guidance for the agent>
- <how to handle ambiguities>
- <how to avoid unsafe assumptions>
Output Format:
- <exact format the user should receive>
Verification:
- <tests, checks, review steps, or acceptance criteria>The refined prompt must be:
When suggesting skills, include:
.agents/skills, .codex/skills, .claude/skills, or similar.If no relevant skill is found, include:
Suggested Skills / Tools:
- None found from available context. Inspect project-local and global skills before starting.If the raw prompt is vague, still produce a useful refined prompt. Add an Assumptions To Confirm section inside the copy-paste block only when those assumptions materially affect execution.
Do not ask the user for clarification unless the raw prompt is impossible to refine safely.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.