prompt-engineering — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited prompt-engineering (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Treat prompts as small behavioral specs. Improve them by naming the job, testing the behavior, changing one important thing at a time, and preserving the prompt's operating context.
Identify the target model or provider, audience, runtime surface, inputs, tools, output contract, constraints, and where the prompt will live. If the prompt belongs to a repo, inspect existing prompts, schemas, examples, tool definitions, evals, logs, and docs before asking avoidable questions.
State the desired behavior, hard requirements, acceptable variation, known failure modes, and evidence that would prove the prompt improved. If success is vague, turn it into 3-7 concrete cases before editing.
Use direct instructions for simple tasks, structured sections for context control, few-shot examples for format or judgment calibration, schemas for machine-readable output, tool-use instructions for action boundaries, and repetition only when the model repeatedly drops critical constraints.
Put task, context, constraints, examples, tools, and output format in separate labeled sections. Delimit user-controlled or retrieved content clearly. Keep stable instructions before variable content when prompt caching, reuse, or maintainability matters.
Test representative, edge, adversarial, and regression cases. Compare outputs against explicit criteria instead of intuition. Record which failures changed and which remained.
Change one major variable at a time: instruction wording, context ordering, examples, output schema, tool contract, reasoning guidance, or model settings. Preserve the previous prompt and test cases until the new version wins on the target criteria.
Return the final prompt, assumptions, changed behavior, eval cases, expected outputs or grading criteria, remaining risks, and any provider-specific settings the caller must preserve.
examples, structured-output instruction, grader prompt, or prompt eval set
mismatched to a target model
abuse is the central risk
for OpenAI-specific current model, API, structured-output, tool-calling, reasoning, caching, or pricing behavior; otherwise verify official OpenAI docs directly. For other providers, verify current official provider docs when those details affect the prompt.
grading design, or acceptance criteria rather than prompt wording.
unsafe tool use, data exposure, or trust boundaries dominate the risk.
or examples to load is context-engineering; deciding how to word the prompt, schema, or example is this skill. When work spans both, draft the context packet first, then own the prompt artifact here.
and failure mode are clear.
prompt embeds retrieved or user-supplied material, fence it with explicit delimiters (e.g. <<untrusted:source>> ... <</untrusted>>, matching the context-engineering convention) and tag fact provenance with [src:code|user|tool|docs|memory|inferred] so downstream graders can detect leakage and instruction-override attempts.
structure.
instruction.
hard to notice.
tools, files, or references when possible.
claims. Do not rely on memory for rapidly changing model behavior.
target model, API, or runtime surface makes them relevant.
Prompts that look polished but fail in practice:
registers; the model averages them and weakens all three.
before the task; clutter without behavioral effect.
rule, the example wins.
putting them in a labeled section or schema.
without observable criteria.
picks one and the parser breaks.
When a prompt fails, classify the failure before rewriting:
Omit Original Prompt Or Version and Run Metadata for tiny rewrites when they are unavailable or not material.
For a prompt rewrite:
## Original Prompt Or Version
...
## Final Prompt
...
## What Changed
...
## Eval Cases
...
## Run Metadata
...
## Assumptions And Risks
...For prompt debugging:
## Diagnosis
Failure category and evidence.
## Original Prompt Or Version
...
## Revision
Changed prompt section or full prompt.
## Validation
Cases that should pass, fail, or remain uncertain.
## Run Metadata
...prompt patterns, source synthesis, and provider-specific notes.
prompt eval design, iteration, and grading workflow.
trigger checks for this skill.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.