Atlas / MCP servers / synaptiai / Prompt Decorators

Prompt DecoratorsBLOCK

mcp/synaptiai/prompt-decorators

A standardized framework for enhancing how LLMs process and respond to prompts through composable decorators, featuring an official open standard specification and Python reference implementation. Claude Code plugin and MCP server integration.

Verdict
BLOCK
Grade
F
Trust score
60 /100
Exposed tools
5 3r · 2w · 0d
Transport
—
License
Apache-2.0
Stars
44
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](LICENSE) [](https://www.python.org/) [](https://synaptiai.github.io/prompt-decorators/) [](https://github.com/astral-sh/ruff)

[](https://github.com/synaptiai/prompt-decorators/actions?query=workflow%3A%22Code+Quality+and+Testing%22) [](https://github.com/synaptiai/prompt-decorators/actions?query=workflow%3A%22Documentation%22) [](https://github.com/synaptiai/prompt-decorators/actions?query=workflow%3A%22Publish+to+PyPI%22)

Prompt Decorators is a comprehensive framework that standardizes how prompts for Large Language Models (LLMs) are enhanced, structured, and transformed. This repository contains both the official Prompt Decorators Specification and its complete Python reference implementation.

Documentation • Prompt Decorators Specification

📋 Table of Contents

  • Overview
  • What Are Prompt Decorators?
  • Key Components
  • Background & Motivation
  • Challenges in Prompt Engineering
  • [Benefits of Prompt Decorators](#benefits-of-prompt-de
Read from source at commit b7078c89c205OBSERVED · 2026-10-08
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add prompt-decorators --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env OPENAI_API_KEY=${OPENAI_API_KEY} -- uvx prompt-decorators
claude-desktop
{
  "mcpServers": {
    "prompt-decorators": {
      "command": "uvx",
      "args": [
        "prompt-decorators"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "OPENAI_API_KEY": "${OPENAI_API_KEY}"
      }
    }
  }
}
03

Exposed tools (5)

3 read · 2 write · 0 destructive.

ToolRiskDescription
apply_decoratorswriteApply decorators to a prompt using the +++ syntax.
create_decorated_promptwriteCreate a decorated prompt using a predefined template.
get_decorator_detailsreadGet detailed information about a specific decorator.
list_decoratorsreadLists all available prompt decorators.
transform_promptreadTransform a prompt using a list of decorator strings.
04

Trust audit

BLOCKgrade F · trust 60/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
declared (5 observation(s))
Dependencies
not all pinned
Secrets in source
found

Findings (21)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
claude-code-plugin/vendor/prompt_decorators/core/dynamic_decorator.py:520
exec(transform_code, namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
prompt_decorators/core/dynamic_decorator.py:520
exec(transform_code, namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
scripts/debug_transform.py:70
exec(transform_code, namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHPrompt injection · prompt.hide_from_user · CWE-94, CWE-1427
xnotes/workflow-agile.md:34
- Remember that a story is not complete if you have not also ran ALL stories and verified all stories pass. Do not tell the user the story is complete, or mark the story as complete unless you have ru
Why it matters. asks the agent to act without the user's knowledge
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
claude-code-plugin/vendor/prompt_decorators/utils/plugins.py:332
module = importlib.import_module(package_name)
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
prompt_decorators/utils/plugins.py:332
module = importlib.import_module(package_name)
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
docs/compatibility.md:48
client = anthropic.Anthropic(api_key="your-anthropic-api-key")
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
docs/quickstart.md:179
client = anthropic.Anthropic(api_key="your-anthropic-api-key")
LOWInventory / provenance · inv.hidden_file · CWE-1104
.cursorignore
.cursorignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.cursorindexingignore
.cursorindexingignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.pre-commit-config.yaml
.pre-commit-config.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
demo/.env.sample
.env.sample
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
docs/generate_docs.py:756
module = importlib.import_module(module_name)
LOWCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
docs/generate_docs.py:798
module = importlib.import_module(module_name)
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
tests/test_transformation_templates.py:29
exec(transform_function, namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
tests/test_transformation_templates.py:52
exec(transform_function, namespace)
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
scripts/yaml_to_schema_converter.py:150
content_hash = hashlib.md5(
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
tests/utils/test_helpers.py:278
return hashlib.md5(prompt.encode()).hexdigest()
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
demo/requirements.txt
prompt-decorators, openai, python-dotenv, rich, typer
Why it matters. 5 requirement(s) not pinned with ==
Fix. pin exact versions
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
docs/requirements.txt
mkdocs, mkdocs-material, mkdocs-autolinks-plugin, mkdocs-git-revision-date-localized-plugin, mkdocs-minify-plugin, mkdocstrings, mkdocstrings-python, pydantic
Why it matters. 13 requirement(s) not pinned with ==
Fix. pin exact versions
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
tests/requirements.txt
pytest, pytest-cov, jsonschema, markdown, python-dotenv
Why it matters. 5 requirement(s) not pinned with ==
Fix. pin exact versions

Gates applied: instruction_override, no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha b7078c89c205full audit observations/trust-audit/mcp-server/synaptiai__prompt-decorators.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08b7078c89c205BLOCKF60first audit
06

Questions

What is the Prompt Decorators MCP server?

A standardized framework for enhancing how LLMs process and respond to prompts through composable decorators, featuring an official open standard specification and Python reference implementation. Claude Code plugin and MCP server integration.

What tools does Prompt Decorators expose?

5 in total: 3 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Prompt Decorators safe to connect to an agent?

No — not without reading the findings first. The audit graded it F (60/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Prompt Decorators need?

It reads ANTHROPIC_API_KEY and OPENAI_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How current is this page?

The grade is for one exact copy of the source (b7078c89c205), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement