Skip to content

Inline the install steps in the agent prompt instead of delegating#42

Merged
ejntaylor merged 2 commits into
mainfrom
inline-agent-install-steps
Jul 13, 2026
Merged

Inline the install steps in the agent prompt instead of delegating#42
ejntaylor merged 2 commits into
mainfrom
inline-agent-install-steps

Conversation

@ejntaylor

Copy link
Copy Markdown
Contributor

Summary

Third field-tested refusal mode for the AI-agent install prompt, following #38 (remote-doc delegation) and #41 (knowledge-cutoff hallucination): agents flag "install the package, then follow the instructions it ships" as handing control to the package author — structurally the same shape as prompt injection — and flag preemptive reassurance language ("published after your knowledge cutoff, don't conclude it doesn't exist") as itself a manipulation signal.

  • Rewrites the README prompt as five numbered, individually inspectable commands (install, scan, hooks, commit, widget snippet) — no delegation, no trust arguments.
  • Demotes AGENT-INSTALL.md / npx @patchstack/connect guide to reference material for framework-specific widget placement, re-run rules, and troubleshooting, consulted after the install is underway rather than the channel the install depends on.
  • Rephrases the guide's knowledge-cutoff note to be purely factual.
  • Documents all three refusal modes in the README so the prompt's shape doesn't get "simplified" back into a refusable form later.

🤖 Generated with Claude Code

Field test three: agents flag "install the package then follow the
instructions it ships" as handing control to the package author, and
flag preemptive reassurance ("published after your knowledge cutoff,
don't be suspicious") as a manipulation signal. Rewrite the prompt as
numbered, individually inspectable commands with no delegation and no
persuasion; demote the bundled guide to reference material for widget
placement and troubleshooting.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@coderbuds

coderbuds Bot commented Jul 13, 2026

Copy link
Copy Markdown

Well-structured docs update inlining install steps with clear security emphasis.

🎯 Quality: 99% Elite · 📦 Size: Small

📈 This month: Your 219th PR — above team average · Averaging Excellent

See how your team is trending →

Compress the inline steps and route the widget install and
framework-specific details through `npx @patchstack/connect guide`
instead of naming the bundled markdown file.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@ejntaylor ejntaylor merged commit 2178212 into main Jul 13, 2026
4 checks passed
@ejntaylor ejntaylor deleted the inline-agent-install-steps branch July 13, 2026 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants