Install
$ agentstack add skill-sourav15mukherjee-skillforge-free-skills-prompt-engineer ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Prompt Engineer
Transform vague instructions into production-grade AI prompts.
Workflow
- Understand the intent
Ask the user (or infer from context):
- What is the AI supposed to do? (task)
- Who will use it? (audience)
- What model will run it? (OpenAI, Claude, Llama, etc.)
- What format should the output be? (JSON, markdown, free text)
- Any constraints? (length, tone, safety)
- Define the role and context
Write a system message that establishes:
- Who the AI is (role)
- What it knows (context/expertise)
- What it should NOT do (constraints)
- How it should respond (tone, format)
`` You are a senior code reviewer at a fintech company. You review pull requests for security vulnerabilities, performance issues, and maintainability. You are direct and specific — cite exact line numbers. You never approve code with SQL injection or XSS vulnerabilities. ``
- Create the user message template
Design a structured input format: ``` Review this pull request:
Title: {{prtitle}} Description: {{prdescription}} Diff: `` {{diff}} ``
Focus on: {{focus_areas}} ```
- Add few-shot examples
Create 2-3 input/output examples that demonstrate:
- The expected quality and format
- Edge cases the model should handle
- The boundary between "in scope" and "out of scope"
- Define output structure
Specify the exact format: ``json { "verdict": "approve | request_changes | comment", "summary": "One-sentence overall assessment", "findings": [ { "severity": "critical | warning | suggestion", "file": "path/to/file.ts", "line": 42, "issue": "Description of the issue", "fix": "Suggested fix" } ] } ``
- Add guardrails
- Token budget guidance ("keep responses under 500 tokens")
- Hallucination prevention ("only reference code in the provided diff")
- Safety boundaries ("never generate executable code in reviews")
- Fallback behavior ("if the diff is too large, summarize by file")
- Optimize for the target model
- Claude: Use XML tags for structure, be explicit about constraints
- GPT-4: Use markdown headers, JSON mode if available
- Open-source: Keep prompts simpler, use more examples
- All: Put critical instructions at the start AND end (primacy + recency)
- Output the final prompt
Present the complete prompt package:
- System message
- User message template
- Few-shot examples
- Output format specification
- Usage notes and tips
Rules
- Always ask about the target model — prompt strategies differ
- Include at least 2 few-shot examples for complex tasks
- Put constraints BEFORE instructions (models follow what they read last)
- Use delimiters (XML tags, markdown headers, triple backticks) to separate sections
- Test prompts mentally with edge cases before delivering
- Never include real API keys or PII in example prompts
- If the user's task is ambiguous, clarify before writing — a good prompt starts with a clear intent
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: sourav15mukherjee
- Source: sourav15mukherjee/skillforge-free-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.