prompt-engineering

Audit LLM prompts against the OWASP LLM Top 10 security checklist.

2|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/alex-voloshin-dev/ai-skills --skill prompt-engineering-alex-voloshin-dev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prompt-engineering
Source: https://github.com/alex-voloshin-dev/ai-skills/tree/main/.windsurf/skills/prompt-engineering
Command: npx skills add https://github.com/alex-voloshin-dev/ai-skills --skill prompt-engineering-alex-voloshin-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the lack of standardized, production-ready prompt engineering practices, helping teams move from ad-hoc prompt editing to a rigorous, eval-first engineering discipline.

Core Features & Use Cases

  • Prompt System Architecture: Provides patterns for instruction hierarchy, context assembly, and output contracts to ensure reliable model behavior.
  • Security & Guardrails: Implements the OWASP LLM Top 10 security checklist to mitigate prompt injection, data leakage, and excessive agency risks.
  • Eval-First Workflow: Offers a comprehensive framework for baseline metrics, regression testing, and canary deployments to ensure prompt changes improve quality without introducing regressions.

Quick Start

Use the prompt-engineering skill to audit my current system prompt against the OWASP LLM Top 10 security checklist and suggest necessary mitigations.

Frequently Asked Questions about prompt-engineering

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure LLM prompts against prompt injection and data leakage?

Secure LLM prompts against prompt injection and data leakage by applying the OWASP LLM Top 10 security checklist to audit system instructions, context assembly, and tool-use boundaries to mitigate excessive agency risks.

What is an eval-first workflow for prompt engineering?

An eval-first workflow for prompt engineering establishes baseline metrics and regression testing before deploying changes. It uses canary deployments and structured output contracts to ensure prompt updates improve quality without introducing regressions.

How do I design agentic workflows with reliable instruction hierarchy?

Design agentic workflows with reliable instruction hierarchy by implementing prompt system architecture patterns for context assembly, multi-agent orchestration, and strict output contracts to ensure predictable model behavior.

Can I use prompt templates for structured output contracts in multi-agent systems?

Yes, prompt templates support structured output contracts in multi-agent systems by providing standardized patterns for instruction hierarchy and context assembly, ensuring reliable communication and predictable model behavior across agents.

What is the best way to audit existing system prompts for LLM security vulnerabilities?

The best way to audit existing system prompts for LLM security vulnerabilities is to evaluate them against the OWASP LLM Top 10 checklist, identifying risks like prompt injection, data leakage, and excessive agency to suggest necessary mitigations.

Why does my LLM prompt regression test fail after context assembly changes?

LLM prompt regression tests fail after context assembly changes when baseline metrics are not aligned with the new instruction hierarchy. Implementing an eval-first workflow with canary deployments catches these quality regressions before full release.