Promptify Skill

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent prompt-optimization skill, with disclosed optional use of project-file reading, web search, sub-agents, and a clipboard command that users should review before using.

This skill appears safe to install as an instruction-only prompt helper. Be aware that +deep or auto-detected codebase research can read relevant project files, +web can use web search, and the generated pbcopy command should be reviewed before running.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If used on a project, the assistant may inspect relevant local files or search the web to improve the prompt.

Why it was flagged

The skill can invoke local file-search/read tools and web tools when requested or auto-detected. This is disclosed and purpose-aligned, but it is still meaningful tool access.

Skill content

- **+deep** → Explore codebase with Glob/Grep/Read for patterns
- **+web** → Web search for current best practices (2024-2026)

Recommendation

Use +deep only when project-file inspection is acceptable, and review the optimized prompt before sharing it outside the project.

Low

#ASI06: Memory and Context Poisoning

What this means

Local project instructions or documentation could shape the optimized prompt, including any incorrect or overly broad guidance present in those files.

Why it was flagged

The codebase researcher intentionally incorporates local documentation and AI-instruction files into its context. This is useful for prompt optimization, but those files may influence the generated prompt.

Skill content

Look for:
- README.md, CONTRIBUTING.md
- CLAUDE.md or AI instructions
- Style guides or .editorconfig

Recommendation

Review the final prompt for unwanted project-specific instructions, especially before reusing it in another context.

Info

#ASI05: Unexpected Code Execution

What this means

A user who manually runs the generated clipboard command could run an incorrectly quoted shell command if the prompt text contains shell metacharacters.

Why it was flagged

The skill instructs the assistant to output a shell command for copying the optimized prompt to the clipboard. The artifacts do not show automatic execution, but users should treat generated shell snippets carefully.

Skill content

2. `echo 'PROMPT' | pbcopy`

Recommendation

Copy the prompt directly when possible, or inspect and safely quote any generated shell command before running it.