Prompt Engineering

Master prompt engineering for AI models: LLMs, image generators, video models. Techniques: chain-of-thought, few-shot, system prompts, negative prompts. Mode...

This guide is coherent for learning prompt engineering, but exercise caution before following its runtime instructions. Do not run curl | sh blindly — inspect the install script at https://cli.inference.sh first and verify checksums from the claimed checksum URL. Understand that using the shown commands will send whatever you include in prompts to third‑party inference services (inference.sh/openrouter/falai/google), so never include secrets, passwords, private keys, or sensitive data in prompts. If you prefer less risk, consider using a vetted package manager, a self‑hosted/local model, or reading the guide without installing the CLI. If you need to use the CLI, confirm the provider's privacy/security policy and where credentials are stored (local config, environment variables, or remote storage) before logging in.

Type: OpenClaw Skill Name: prompt-engineering Version: 0.1.5 The skill is classified as suspicious due to the presence of shell commands (`curl | sh` and `npx`) in `SKILL.md` that are outside the explicitly declared `allowed-tools: Bash(infsh *)`. While these commands are presented as user instructions for installation and skill management, they represent a significant prompt injection vulnerability. If an AI agent were to misinterpret these instructions as commands to execute, it could lead to arbitrary code execution from remote sources (cli.inference.sh, npm packages), bypassing the intended tool restrictions. Additionally, the broad `Bash(infsh *)` permission, while aligned with the skill's stated purpose, allows the agent to execute any `infsh` command, which could be abused if the agent is maliciously prompted.