vapi-prompt-builder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vapi-prompt-builder (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to produce production-ready Vapi voice agent system prompts. Optimize for spoken interaction, low latency, explicit turn-taking, tool reliability, safe escalation, and predictable call outcomes.
Start by classifying the request:
Then resolve deployment shape:
If the request is ambiguous and the workflow may involve multiple specialized roles, routing, or handoffs, stop and ask: "Should this be designed as one Vapi assistant, or as a Vapi Squad with multiple assistants and handoffs?" Do not draft until this is resolved.
Read references/squad-prompting.md when the user mentions squads, Handoff Tools, handoffs between assistants or squads, silent handoffs, dynamic routing, router/triage assistants, specialist assistants, or a workflow that is too broad for one reliable prompt.
Before writing or preserving workflow details, run a capability-grounding pass. Verify that every claimed input, artifact, tool action, side effect, and example is possible through the actual call channel, runtime context, visible Vapi tools, or explicitly described backend behavior. Read references/capability-grounding.md when the prompt mentions files, uploads, attachments, documents, screenshots, browser/web actions, async jobs, integrations, or any action the phone caller cannot perform directly during the call.
Read references/voice-prompt-patterns.md when creating or substantially rewriting a prompt, or when the request involves voice style, examples, tool behavior, information collection, or call endings.
Run an identifier-hygiene pass before finalizing. Read references/identifier-hygiene.md when the prompt uses tool names, resource IDs, snake_case identifiers, placeholder names, or generic values such as the_tool_name.
Run a Vapi trust-boundary pass when the prompt, tools, or configuration mention authentication, caller identity, account IDs, permissions, secrets, secure values, verified values, static parameters, function.parameters, dynamic variables, variableExtractionPlan, tool aliases, handoff arguments, or sensitive tool responses. Read references/vapi-security-trust.md before recommending where those values belong.
Run a Vapi readiness pass before presenting an artifact as ready to build or configure. Read references/vapi-readiness.md when the output includes tools, structured outputs, dynamic variables, Squads, handoffs, pronunciation guidance, testing/evals, or configuration notes. Separate confirmed Vapi configuration from assumptions and missing deployment inputs.
Ask the fewest questions needed to make a useful first draft. Prefer a complete draft with clear assumptions over a long upfront questionnaire.
Always collect or infer:
Read references/intake-question-bank.md when the request is vague, high-risk, or missing several essentials.
If the user provides an existing prompt, inspect it before asking questions. Ask only about missing facts, contradictions, tool behavior, compliance constraints, or ambiguous handoff rules.
For a single assistant, generate or improve these sections unless the user asks for a narrower output:
For a Squad, generate or improve:
For new prompts and substantial rewrites, include a compact Examples section inside the final Vapi system prompt unless the user explicitly asks to omit examples or there is a strong latency/token reason to keep the prompt minimal. Do not substitute external test scenarios for in-prompt examples.
Keep the final system prompt lean. Do not include tutorial prose, rationale, or markdown intended for humans unless the user requests it. Use section headers only if they improve maintainability.
Format the final prompt for fast model parsing, not as human-facing documentation:
Design in-prompt examples as behavioral training data for the voice agent:
Tool Call: lines or machine-facing configuration notes.Keep external test scenarios separate from the final prompt. Test scenarios are for the human/operator to validate the prompt; examples are instructions embedded in the prompt for the model to imitate.
Before returning the final prompt, run a voice-agent pass:
When tools are involved, review both prompt instructions and tool configuration. Flag items that should be configured outside the system prompt:
For a new prompt, return:
For an improved prompt, return:
For an audit, return:
Read references/review-checklist.md before finalizing an audit or substantial rewrite.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.