PromptX

Overview

From the repository's own README, as read at the audited commit.

<div align="center">  <img src="assets/logo/PromptX-transparent.png" alt="PromptX Logo" width="120" height="120"/>  <h1>PromptX · Leading AI Agent Context Platform</h1>  <h2>✨ Chat is all you need - Revolutionary interaction design that turns AI agents into industry experts</h2>  <p><strong>Core Capabilities:</strong>AI Role Creation Platform | Intelligent Tool Development Platform | Cognitive Memory System</p>  <p>Based on MCP protocol, inject professional capabilities into Claude, Cursor and other AI applications with a single command</p><!-- Badges --><p>    <a href=" "><img src="https://img.shields.io/github/stars/Deepractice/PromptX?style=social" alt="Stars"/></a>    <img src="https://komarev.com/ghpvc/?username=PromptX&label=views&color=0e75b6&style=flat&abbreviated=true" alt="Views"/>    <a href="LICENSE"><img src="https://img.shields.io/github/license/Deepractice/PromptX?color=blue" alt="License"/></a>    <a href="https://zread.ai/Deepractice/PromptX" target="_blank"><img src="https://img.shields.io/badge/Ask_Zread-_.svg?style=flat&color=00b0aa&labelColor=000000&logo=data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZDMS44ODgxIDEuNjAwMSAxLjYwMTU2IDEuODg2NjQgMS42MDE1NiAyLjI0MDFWNC45NjAxQzEuNjAxNTYgNS4zMTM1NiAxLjg4ODEgNS42MDAxIDIuMjQxNTYgNS42MDAxSDQuOTYxNTZDNS4zMTUwMiA1LjYwMDEgNS42MDE1NiA1LjMxMzU2IDUuNjAxNTYgNC45NjAxVjIuMjQwMUM1LjYwMTU2IDEuODg2NjQgNS4zMTUwMiAxLjYwMDEgNC45NjE1NiAxLjYwMDFaIiBmaWxsPSIjZmZmIi8%2BCjxwYXRoIGQ9Ik00Ljk2MTU2IDEwLjM5OTlIMi4yNDE1NkMxLjg4ODEgMTAuMzk5OSAxLjYwMTU2IDEwLjY4NjQgMS42MDE1NiAxMS4wMzk5VjEzLjc1OTlDMS42MDE1NiAxNC4xMTM0IDEuODg4MSAxNC4zOTk5IDIuMjQxNTYgMTQuMzk5OUg0Ljk2MTU2QzUuMzE1MDIgMTQuMzk5OSA1LjYwMTU2IDE0LjExMzQgNS42MDE1NiAxMy43NTk5VjExLjAzOTlDNS42MDE1NiAxMC42ODY0IDUuMzE1MDIgMTAuMzk5OSA0Ljk2MTU2IDEwLjM5OTlaIiBmaWxsPSIjZmZmIi8%2BCjxwYXRoIGQ9Ik0xMy43NTg0IDEuNjAwMUgxMS4wMzg0QzEwLjY4

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude mcp add runtime -- npx -y @agentxjs/[email protected]

{
  "mcpServers": {
    "runtime": {
      "command": "npx",
      "args": [
        "-y",
        "@agentxjs/[email protected]"
      ]
    }
  }
}

Exposed tools (57) 52 read · 4 write · 1 destructive

Blast radius: 1 tool can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Details

Source

deepractice/promptx

npm

@agentxjs/runtime@2.0.2

Transports

stdio · streamable-http

License

MIT

Stars

3,688 · pushed 119d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (10 observation(s))

Network

declared (6 observation(s))

Shell

declared (10 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (25)

const config = yaml.load(yamlInput) as any;

new Function(trimmedContent)

new Function(content)

new Function(content);

data = eval(`(${dataMatch[2]})`);

icon.icns

emoji: '👨💻',

delete_workspace_item

.actrc

.eslintrc.js

.versionrc.json

.eslintrc.cjs

return crypto.createHash('md5').update(path.resolve(projectPath)).digest('hex').substr(0, 8)

return crypto.createHash('md5').update(path.resolve(projectPath)).digest('hex').substr(0, 8)

const hash = crypto.createHash('md5');

const hash = crypto.createHash('md5');

const esbuildBin = resolve(__dirname, '../../node_modules/.bin/esbuild')

translationsDir = path.join(__dirname, '../../src/main/i18n');

const devPath = path.join(__dirname, '../../../../packages/mcp-office/dist/index.js')

const nodeModulesPath = path.join(__dirname, '../../../node_modules/@promptx/mcp-office/dist/index.js')

const devPath = path.join(__dirname, '../../../../packages/mcp-workspace/dist/mcp-server.js')

"url": "http://127.0.0.1:5203/mcp"

"url": "http://127.0.0.1:5203/mcp"

"url": "http://127.0.0.1:5203/mcp"

"url": "http://127.0.0.1:5203/mcp"

Gates applied: no_behavioural_pass.

Audited 2026-09-14 · audit v0.4.0 · source sha d9f54f4d94e5 · full audit: observations/trust-audit/mcp-server/deepractice__promptx.json · Report an issue or request a re-scan

Audit history

Also audited

Servers with a similar trust profile.

Questions