Is gyaan-dub/prompt-enhancer safe?
Yes. gyaan-dub/prompt-enhancer is safe to install. Oathe's behavioral security audit gave the prompt-enhancer skill by gyaan-dub a trust score of 94/100 with 4 findings, none critical or high.
https://clawhub.ai/gyaan-dub/prompt-enhancer
Is gyaan-dub/prompt-enhancer safe to install?
The prompt-enhancer skill appears to be a legitimate tool for improving user prompts with transparent functionality. While it modifies agent behavior through role assignment and prompt rewriting, these are clearly documented features with user visibility.
What security issues were found in gyaan-dub/prompt-enhancer?
Category Scores
Findings (4)
MEDIUM Agent Role Assignment Instructions -13 ▶
The skill instructs the agent to assign itself specific expert roles (e.g., 'As a senior full-stack developer'). While this is the intended functionality, it modifies the agent's default behavior and could potentially be misused.
LOW Prompt Rewriting Behavior -5 ▶
The skill modifies user prompts before execution, which changes normal agent processing. However, it provides transparency by showing the enhanced prompt to users.
LOW Installation-time Canary Access -5 ▶
During installation, the process accessed several canary files (.env, SSH keys, AWS credentials). However, this appears to be normal installation behavior and no data was exfiltrated.
INFO Potential Amplification Risk -15 ▶
If a user includes malicious instructions in their input after 'p:', the skill might inadvertently enhance and amplify those instructions. However, the skill preserves original intent and provides transparency.
Should I install gyaan-dub/prompt-enhancer?
Oathe's verdict for gyaan-dub/prompt-enhancer is SAFE with a trust score of 94/100. Recommendation: Install.