7.0.13

PR #211: Prompts Overhaul

Created: November 20, 2025

📊 Changes Overview

Metric	Value
Files Changed	16
Additions	+3,201
Deletions	-96
Net Change	+3,105

---

🎯 What's New

✨ New Features

🔒 Security Review Prompt (review_security.ts)

• New AI-guided security review system
• Implements systematic vulnerability assessment workflow
• Key capabilities:
  • Attacker mindset approach for threat modeling
  • Maps attack surfaces (secrets, injection, SSRF, RCE, auth/authz, CSRF, etc.)
  • Structured security analysis with confidence levels
  • Integration with OWASP Cheat Sheet Series
  • Takes repoUrl parameter for targeted analysis
• Output: Concise findings with GitHub URLs and impact assessment

🔄 Changes

Simplified Prompt Architecture

• Removed unnecessary preprocessing from research.ts and use.ts
  • Eliminated regex-based tool name replacements
  • Content now passed through directly
  • Cleaner, more maintainable code

Enhanced Prompt Registration (prompts.ts)

• Conditional registration with validation
• Checks before registering each prompt:
  • ✅ Prompt metadata exists
  • ✅ Name is non-empty string
  • ✅ Description is non-empty string
  • ✅ Content is non-empty string
• Graceful degradation: Missing/invalid prompts won't break the system

Build Configuration Hardening (rollup.config.js)

• Changed noEmitOnError: false → noEmitOnError: true
• Stricter validation: Build now fails on TypeScript errors in src AND tests
• Prevents broken code from being deployed

❌ Removals

Kudos Prompt Deleted

• Removed src/prompts/kudos.ts (36 lines)
• Previously: Helped users acknowledge repositories used during research
• Functionality retired in favor of security focus

---

📁 Files Modified

Source Code (8 files)

1. packages/octocode-mcp/rollup.config.js (+1, -1)

   • Build strictness improvement

2. packages/octocode-mcp/src/prompts/kudos.ts (deleted)

   • Removed attribution prompt

3. packages/octocode-mcp/src/prompts/prompts.ts (+39, -4)

   • Conditional registration logic

4. packages/octocode-mcp/src/prompts/research.ts (+3, -29)

   • Simplified implementation

5. packages/octocode-mcp/src/prompts/review_security.ts (new, +96)

   • Security review prompt

6. packages/octocode-mcp/src/prompts/use.ts (+2, -20)

   • Simplified implementation

7. packages/octocode-mcp/src/tools/content.json (metadata update)

   • Replaced kudos with reviewSecurity

8. packages/octocode-mcp/src/tools/toolMetadata.ts (+9, -1)

   • Added isToolAvailableSync() helper
   • Updated prompt interface

Tests (8 files)

• tests/prompts/prompts.test.ts (+478, -0)
• tests/prompts/research.test.ts (+257, -0)
• tests/prompts/review_security.test.ts (+383, -0)
• tests/prompts/use.test.ts (+297, -0)
• Plus 4 more test files with updates

Test Coverage: Comprehensive validation, registration, error handling, and edge cases