Ironprose
v1.0.2Fiction prose analysis — catch weak verbs, repetition, clichés, passive voice, and other craft issues in manuscripts
⭐ 0· 208·1 current·1 all-time
byJustin Poehnelt@jpoehnelt
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (prose analysis) aligns with requiring an 'ironprose' CLI binary and the SKILL.md documents analyze/compare/rate workflows that fit the stated purpose.
Instruction Scope
The SKILL.md instructs agents to read manuscript files, pipe stdin, and run analyze/compare/rate commands (expected for this task). However, the CLI defaults to an external API base URL (https://prose-mcp.fly.dev) and has a 'rate' command that explicitly sends diagnostic ratings back to the service — meaning user text and feedback may be transmitted to an external endpoint. The document does not clearly warn about this privacy/telemetry behavior.
Install Mechanism
This is an instruction-only skill and declares no install spec. The SKILL.md suggests installing via npx or cargo, which is reasonable for a CLI. No untrusted download URLs or extract operations are present in the skill bundle itself.
Credentials
The registry lists no required env vars, but the CLI supports IRONPROSE_API_URL and IRONPROSE_API_KEY (optional). Those are proportional to a client that can point at a hosted service or use an API key, but they also enable redirecting data to arbitrary endpoints if misconfigured. The skill does not request unrelated credentials.
Persistence & Privilege
No always:true, no system-wide config changes, and the skill is user-invocable only. It does not request permanent agent presence or elevated privileges.
What to consider before installing
This skill expects you to have an 'ironprose' CLI available and will read files you point it at (e.g., chapter-07.md, draft.md). Important: the CLI defaults to a remote API (https://prose-mcp.fly.dev) and the 'rate' flow sends diagnostics back to that service, so your manuscript text and feedback may be transmitted off your machine. Before installing or using: verify the ironprose binary's provenance (inspect the GitHub repo referenced in SKILL.md), decide whether you’re comfortable sending drafts to the hosted service, consider running a locally-only version if available, avoid using npx on sensitive texts (it fetches and runs code from npm), and test with non-sensitive snippets to confirm behavior. If you need strong confidentiality, do not use this skill until you confirm an offline/local mode or self-hosted endpoint.Like a lobster shell, security has layers — review code before you run it.
latestvk970jfacvma7q34gv5nsp1nbrn82fkky
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsironprose