plugins/autonomous-dev/skills/prompt-engineering/SKILL.md
Prompt engineering patterns for writing agent prompts and skill files — constraint budgets, register shifting, HARD GATE patterns, anti-personas. Use when writing or reviewing agents/*.md or skills/*/SKILL.md. TRIGGER when: agent prompt, skill file, prompt engineering, model-tier compensation, HARD GATE, prompt quality. DO NOT TRIGGER when: user-facing docs, README, CHANGELOG, config files.
npx skillsauth add akaszubski/autonomous-dev prompt-engineeringInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Compact, actionable patterns for writing agent prompts and skill files. See docs/PROMPT-ENGINEERING.md for full rationale and academic citations.
| Range | Compliance | |-------|-----------| | 1–6 | Reliable | | 7–15 | Unpredictable | | >15 | Degraded |
Rule: Max 6 hard constraints per section. Hard gates at the END of sections (Claude recency effect).
Before finalizing any hard gate or enforcement directive, verify the verbs:
audit, verify, critically analyse, enumerate — use for HARD GATEsreview, check, describe — use for standard task instructionslook at, mention, note — advisory only; never in enforcementFORBIDDEN: Tier 3 verbs in REQUIRED or FORBIDDEN lists.
FORBIDDEN for analytical agents (reviewers, auditors, analysts, planners):
You are a [role]... persona prefixesAct as an expert in... framingImagine you are... setupsSource: PRISM (arxiv:2603.18507) — expert personas reduce knowledge-retrieval accuracy for analytical tasks.
Correct pattern: Role description + behavioral directive.
# BAD
You are a senior security engineer. Review this code.
# GOOD
Perform a security audit. Enumerate all CWE categories present.
### HARD GATE: [Topic]
**[One-sentence scope statement]**
**REQUIRED** (all must be met):
- Specific action A
- Specific action B
**FORBIDDEN** — You MUST NOT do any of the following:
- ❌ You MUST NOT [prohibited action]
- ❌ You MUST NOT [prohibited action]
**Why**: [One sentence — increases compliance]
<model-tier-compensation tier="[haiku|sonnet|opus]">
## Model-Tier Behavioral Constraints ([Tier Name])
- Do NOT [specific tendency to suppress].
- ALWAYS [specific required behavior].
</model-tier-compensation>
Rules:
tier attribute for automated validationUse for planning, security scans, and architecture tasks. 2–3 passes optimal (NeurIPS 2023).
## Pass 1: GENERATE
[Initial output]
## Pass 2: FEEDBACK
Critically analyse Pass 1. Enumerate:
- Gaps (missing)
- Errors (wrong)
- Ambiguities (unclear)
## Pass 3: REFINE
Apply Pass 2 feedback. Produce final output.
Anti-pattern: "Review your answer and improve it" — Tier 3, will be ignored. Use Tier 1: "Critically analyse for gaps and enumerate missing cases."
Every block (hook or agent) MUST include a required next action:
# STICK only (bad)
BLOCKED: Cannot edit agents/*.md outside the pipeline.
# STICK + CARROT (good)
BLOCKED: Cannot edit agents/*.md outside the pipeline.
REQUIRED NEXT ACTION: Use /implement to run the pipeline with your changes.
Hook JSON format:
{
"decision": "block",
"reason": "What failed and why.",
"requiredNextAction": "Specific step to take next."
}
| Anti-Pattern | Why Wrong | Fix |
|-------------|-----------|-----|
| >15 constraints per section | MOSAIC: degraded compliance | Split into subsections ≤6 each |
| Persona prefix for analytical tasks | PRISM: reduces accuracy | Role description + directive |
| Hedge words in hard gates | Weakens enforcement | Delete or replace with MUST |
| Prose-buried constraints | Low compliance | Convert to numbered list |
| Meta-commentary about model weaknesses | May reinforce behavior | Reframe as behavioral directive |
| Block without carrot | Model loops | Add REQUIRED NEXT ACTION |
See docs/PROMPT-ENGINEERING.md for:
development
GenAI-first testing with structural assertions, congruence validation, and tier-based test structure. Use when writing tests, setting up test infrastructure, or validating coverage. TRIGGER when: test, pytest, coverage, TDD, test patterns, congruence, validation. DO NOT TRIGGER when: production code implementation, documentation, config-only changes.
development
One topic, one home. Routes content to its canonical store (CLAUDE.md, PROJECT.md, MEMORY.md, docs/, memory/) and audits for duplication. TRIGGER when: auditing CLAUDE.md/PROJECT.md/MEMORY.md sizes, deduplicating docs, applying the content-allocation pattern to a new repo, running /align --content. DO NOT TRIGGER when: implementing features, writing tests, routine code edits, debugging.
testing
JSON persistence, atomic writes, file locking, crash recovery, and state versioning patterns. Use when implementing stateful libraries or features requiring persistent state. TRIGGER when: state persistence, atomic write, file locking, crash recovery, checkpoint. DO NOT TRIGGER when: stateless utilities, pure functions, config reads, documentation.
development
Security best practices covering API key management, input validation, injection prevention, and OWASP patterns. Use when handling secrets, user input, or security-sensitive code. TRIGGER when: security, API key, secret, input validation, injection, OWASP. DO NOT TRIGGER when: non-security code, styling, documentation, test scaffolding.