PromptingBLOCK
The AI toolkit for building reliable browser automations
Overview
The AI toolkit for building reliable browser automations
eeed53996b1dOBSERVED · 2026-10-13Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| codex | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: prompting description: | Guide for writing effective system prompts for LLM agents. Use when creating or editing system prompts for applications, agent configurations, or development tools. --- # Prompting ## Philosophy LLMs are intelligent by default. System prompts set direction and impose constraints, not explain reasoning. Start minimal. Observe failures. Add targeted fixes. Every instruction must justify its token cost by solving a real problem. Do not explain existing capabilities, list obvious practices, add preventive instructions, or repeat information. ## Structure Use markdown sections and paragraphs. Each section describes one behavior or constraint. State what to do or avoid. Explain why if non-obvious. Show correct behavior with examples. ### Formatting Headings up to level 3. Plain paragraphs. No bold, italics, or emojis. Code blocks for commands. Lists only for distinct enumerable items. ## Examples Wrap examples in `<example>` tags with user/assistant prefixes. One pair per tag. ``` <example> user: What's the capital of France? assistant: Paris </example> ``` Use brackets for tool actions instead of showing invocations: ``` <example> user: Find all TODO comments assistant: [searches codebase] Found 3 TODOs: ... </example> ``` ## Include Behaviors the model gets wrong by default. Domain constraints. Output format requirements. Safety boundaries. Tool integrations. ## Omit Reasoning instructions. Problem-solving approaches. Common sense behaviors. Ethical guidelines. Capability descriptions. ## Iteration Start minimal. Test with real inputs. Identify failures. Add targeted fixes. Remove unnecessary instructions. Track which instructions prevent which failures. If you cannot identify the specific problem an instruction solves, remove it. ## Model-Specific Guidance Consult references/ for model-specific patterns: - references/claude.md - XML structure, countering sycophancy, trigger words, parallel execution - references/gpt.md - Contradiction sensitivity, role hierarchy, verbosity control, metaprompting - references/gemini.md - Conciseness, tool explanations, library checks, context placement - references/codex.md - OpenAI Codex models, tool implementations, autonomy patterns, compaction
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (6)
<INSTRUCTIONS>
.claude/skills/glimpse-changes
.claude/skills/improve-codebase-architecture
.claude/skills/mintlify
.claude/skills/turborepo
.claude/skills/writing-tests
Gates applied: no_behavioural_pass.
eeed53996b1dfull audit observations/trust-audit/skill/saffron-health__prompting.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-13 | eeed53996b1d | BLOCK | D | 69 | first audit |
Questions
What does the Prompting skill do?
The AI toolkit for building reliable browser automations
Is Prompting safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What can Prompting access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Prompting work with?
Its documentation mentions codex. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (eeed53996b1d), read on 2026-10-13. The repository is watched, and a new audit runs when it changes — this is the first audit.