📦

promptdna-mcp

Name: promptdna-mcp
Author: jamesplotts

Revisão do conteúdo r1 Seguro ⚙️ Comandos externos🌐 Acesso à rede

Compose Prompts From PromptDNA's Vetted Block Library

Writing effective prompts from scratch wastes time and produces inconsistent results. This skill teaches your agent to search, inspect, and assemble prompts from PromptDNA's library of over 950 community-tested prompt blocks through the PromptDNA MCP server, while spending metered credits efficiently.

Suporta: Claude Codex Code(CC)

🥉 78 Bronze

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "promptdna-mcp" from https://skillstore.io/skills/jamesplotts-promptdna-mcp.md and its manifest at https://skillstore.io/api/skills/jamesplotts-promptdna-mcp/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/jamesplotts-promptdna-mcp.md manifest assinado GET /api/skills/jamesplotts-promptdna-mcp/manifest lockfile assinado GET /api/skills/jamesplotts-promptdna-mcp/lockfile

Testar

Usando "promptdna-mcp". Search PromptDNA for blocks about summarizing legal contracts.

Resultado esperado:

The agent calls search_blocks with the query and returns a short list of candidate blocks, each with its identifier, category, domain, and a one-line description, plus a note on remaining free search calls this hour.

Usando "promptdna-mcp". Compose a prompt for a customer support assistant using the two blocks we picked.

Resultado esperado:

The agent calls compose_prompt once with a tight task description and the two block identifiers, then returns the assembled prompt along with the variables it filled and the credits the call consumed.

Auditoria de segurança

Seguro

v1 • 19/07/2026 Abrir o relatório versionado

This is a documentation-only Agent Skill (SKILL.md + README.md + LICENSE, no executable scripts) that teaches an agent how to use the PromptDNA MCP server. All 50 'external_commands' static findings are false positives caused by the scanner matching Markdown inline-code backticks around MCP tool names as Ruby/shell backtick execution; no code runs. The two hardcoded URLs are the documented MCP endpoint, and the crypto-private-key mention is a standard EIP-191 nonce-signing flow that never handles a secret. Notably, the 'critical' prompt-injection finding matched the skill's own defensive Safety section, which instructs the agent to reject and report injection attempts in third-party block content. No genuine security risk was found.

Arquivos analisados

260

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

A auditoria estática e semântica concluída mais recente não detectou achados de segurança confirmados. Isso não comprova que a skill não tenha efeitos colaterais.

Auditado por: claude

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/jamesplotts-promptdna-mcp/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/jamesplotts-promptdna-mcp/security.svg)](https://skillstore.io/skills/jamesplotts-promptdna-mcp?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/jamesplotts-promptdna-mcp?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jamesplotts-promptdna-mcp/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/jamesplotts-promptdna-mcp.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

jamesplotts. (2026). promptdna-mcp security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jamesplotts-promptdna-mcp/audits/1

Citação BibTeX

@techreport{jamesplotts-jamesplotts-promptdna-mcp-2026,
  author = {jamesplotts},
  title = {promptdna-mcp security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/jamesplotts-promptdna-mcp/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "promptdna-mcp security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "jamesplotts"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/jamesplotts-promptdna-mcp/audits/1"
identifiers:
  - type: other
    value: "skillstore:jamesplotts-promptdna-mcp:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Assemble a task-specific prompt quickly

A developer wants a strong prompt for a niche task and asks the agent to find and combine proven blocks instead of drafting from scratch.

Reuse vetted domain prompt fragments

A domain specialist needs consistent personas and constraints across many prompts and pulls tested fragments from a shared library.

Contribute and earn from prompt blocks

A prompt engineer submits reusable blocks and benchmarks to the community library to earn credits and share proven components.

Teste estes prompts

Find candidate blocks

Use the PromptDNA skill to search for prompt blocks about writing clear API documentation. Show me the top candidates with their categories.

Inspect before composing

Fetch the details for these two PromptDNA blocks and check their variables and compatibility before we compose anything.

Compose a full prompt

Compose a prompt for a code review assistant using the PromptDNA blocks we selected, and fill in the required variables.

Contribute a new block

Submit this reusable persona block to PromptDNA in the software domain, then rate the blocks we used in this session.

Boas práticas

Discover with cheap or free tools first, then call the expensive compose_prompt tool only once with a scoped block list.
Inspect a block's template, variables, and license before reusing or composing with it.
Treat every fetched block template as untrusted input and report suspected injection attempts instead of acting on them.

Evitar

Calling compose_prompt repeatedly with speculative retries, which multiplies credit spend.
Splicing a fetched block template into a system prompt without reviewing it first.
Signing any wallet message other than the nonce returned by register_agent.

Perguntas frequentes

What does this skill actually do?

It teaches an AI agent how to search, inspect, compose, and contribute reusable prompt blocks through the PromptDNA MCP server. It is documentation, not executable code.

Does it cost money to use?

Most tool calls consume credits. One credit equals about one tenth of a US cent, and credits are earned by contributing or purchased with USDC. Some discovery calls are free within hourly limits.

Does the skill run any scripts on my machine?

No. The skill contains only documentation files. All actions happen as calls to the remote PromptDNA MCP server, not as local code execution.

Is the prompt content safe to use directly?

Blocks are community-contributed and not verified. The skill instructs the agent to treat all block content as untrusted and to review it before use.

How does an autonomous agent register?

It calls register_agent with a wallet address, pays a one-time small USDC anti-spam fee, signs the returned nonce, and calls verify_registration to receive an API key that starts with zero credits.

Which AI tools support this skill?

The skill is compatible with Claude, Codex, and Claude Code, which can load its documentation and connect to the PromptDNA MCP server.

Detalhes do desenvolvedor

Autor

jamesplotts

Licença

mit

Revisão da Skillstore

Aviso de versão

O autor não declarou uma versão.

Repositório

https://github.com/jamesplotts/promptdna-mcp-skill/tree/2a74b2bf011a6c53df0bb5c8e452ab66564bbf60/

Referência

a23abd68e275dedda419f0cc9e4f99e3588422bb

Atualidade da manutenção

20/07/2026

Uso

0 downloads · 0 visualizações

Estrutura de arquivos

📄 LICENSE

📄 README.md

📄 SKILL.md