惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

B
Blog RSS Feed
Security Archives - TechRepublic
Security Archives - TechRepublic
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
小众软件
小众软件
V
V2EX
B
Blog
腾讯CDC
D
DataBreaches.Net
H
Hackread – Cybersecurity News, Data Breaches, AI and More
月光博客
月光博客
The Cloudflare Blog
T
The Blog of Author Tim Ferriss
云风的 BLOG
云风的 BLOG
Latest news
Latest news
L
LINUX DO - 最新话题
C
Check Point Blog
Attack and Defense Labs
Attack and Defense Labs
H
Hacker News: Front Page
Forbes - Security
Forbes - Security
H
Help Net Security
S
Securelist
D
Docker
Blog — PlanetScale
Blog — PlanetScale
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
The Last Watchdog
The Last Watchdog
N
News and Events Feed by Topic
G
Google Developers Blog
AI
AI
I
Intezer
L
LangChain Blog
NISL@THU
NISL@THU
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
人人都是产品经理
人人都是产品经理
Hugging Face - Blog
Hugging Face - Blog
罗磊的独立博客
T
Tenable Blog
Jina AI
Jina AI
I
InfoQ
C
Cybersecurity and Infrastructure Security Agency CISA
Cisco Talos Blog
Cisco Talos Blog
C
CERT Recently Published Vulnerability Notes
GbyAI
GbyAI
T
Tailwind CSS Blog
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
O
OpenAI News
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Know Your Adversary
Know Your Adversary
T
Troy Hunt's Blog
Google Online Security Blog
Google Online Security Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Treat prompt libraries as first-class deliverables for reliable AI code assistance
Dave Kurian · 2026-06-20 · via DEV Community

A working prompt library is the main event, not an appendix. The industry still treats prompts as some half-baked spitball left in a README, or, worse, a plaintext blob stapled to package.json and forgotten. That's a waste of compute and credibility. What powers reliable AI-assisted refactoring, onboarding, or even next-gen code IDEs is not the size of the model but the clarity and context supplied by the actual, shipped prompt set.

OTF kits turn this lesson into a repeatable deliverable: every paid template includes 20+ production-tested prompts tied to the real file structure, component API, and product-specific conventions. This is not a suggestion; it's structural.

The takeaway: a real prompt library is as important as your component library. Treat it like one.

Start with the pain: why blank chat boxes don't scale

The web is full of “integrations” that paste a blank chat input over your codebase and call it an “AI coding assistant.” The result: hallucinated function names, invented conventions, broken import paths. Here’s what happens in real life:

Dev: "Add a social login button."
AI (blank prompt): "Sure! Insert <SocialLoginButton> in your LoginScreen.js."
Dev: (There’s no such component. There's not even a LoginScreen.js.)

Short: A generic prompt with zero context simply can't know your conventions, files, or patterns. The agent will either fail, hallucinate, or pepper you with clarifying questions you have already answered in your product architecture.

Takeaway: Prompting without context is coding without types — fragile guesses instead of structured outcomes.

What a first-class prompt library enables

When the prompt library ships with the codebase, it looks like this:

  • Every prompt knows the folder structure (e.g., features/auth, screens/Settings/index.tsx).
  • Conventions are hard-coded: naming, import styles, design token usage.
  • Endpoints and integration points (e.g., “update the Stripe webhook handler in api/webhooks/stripe.ts”) are spelled out.
  • The prompt language is focused, directive, full of worked examples — not meandering.

Because each is tested and versioned alongside the code, drift is minimal and “works on my machine” is real: you change the signature, you change the prompt.

Takeaway: Treating the prompt library as code is the difference between hope-driven and intent-driven agents.

Anatomy of a working prompt: local, explicit, and testable

A real prompt for an agent doesn't just say "add a feature" — it walks the tool through your internal structure, conventions, and gotchas, like a senior engineer onboarding a new team member.

Example: OTF SaaS Dashboard kit ships this inside ai/prompts/upgrade-billing.md:

You’re adding a billing option using Stripe. 
- All billing logic lives in `features/billing/`.
- Webhook handlers are in `api/webhooks/stripe.ts`.
- Use the `<BillingSettings />` component.
- Apply `@otfdashkit/tokens` for theme colors.
- Update docs in `docs/billing.md`.

A properly engineered CLI command feeds this prompt to Cursor, Claude, or any API-driven agent, binding real file names:

cursor run \
  --prompt-file ai/prompts/upgrade-billing.md \
  --project-root /full/path/to/kit \
  --output-mode patch

You get a controlled, repeatable outcome — no hallucinated file trees, no invented imports.

Takeaway: A localized, declarative prompt is a spec, not a guess.

Structuring prompts for agent execution: constraints over vibes

The test for a useful prompt isn’t “does this sound good in a README,” but “can a non-human tool execute this reliably against THIS codebase?” That means:

  • File names, folders, and exports match the kit — zero ambiguity.
  • Each prompt is tied to a specific job (e.g., "Migrate avatar to new CDN", "Wire up feature flag", "Refactor layout grid").
  • Constraints are explicit; gotchas are called out (“Never edit node_modules”, “Always use tokens.colors.primary”).
  • Examples are real, not hypothetical — they cite files actually present.

Bad prompt (README-level):

Add Stripe Billing.

Working prompt (kit-level):

Add billing with Stripe:
1. Create `features/billing/stripe.ts` for API integration.
2. Edit `pages/settings/billing.tsx` to add the UI.
3. Use the `StripeButton` component — see `features/billing/StripeButton.tsx`.

Every bullet line is an instruction the agent can map to a directory — or fail early if the file is missing.

Takeaway: A prompt an agent can’t run is just documentation. A prompt an agent can run is infrastructure.

Metrics: what a prompt library enables

Real prompt libraries cut failures — and wasted cycles — dramatically. Here’s what changes with a prompt set tied to your kit:

Challenge README Prompt OTF Prompt Library
Hallucinated file paths Frequent Rare
Follow house conventions Inconsistent Always enforced
Time to first working patch Slow (many retries) Fast (first try works)
Drift with code changes Constant Tracked together
Onboarding new agents Unpredictable Deterministic

[[COMPARE: README-level prompt vs shipped prompt library]]

Takeaway: The delta is not subtle — the prompt library is the agent’s map.

Building the library: process, not afterthought

Most teams treat prompt engineering as an afterburner. OTF bakes it into every kit:

  1. Declare the env: Each template has a fully specified ai/prompts/ folder mapping jobs to files.
  2. Test with real agents: Each prompt gets a minimum working patch from an LLM — patched, run, and visually reviewed before shipping.
  3. Update as code changes: Edit a feature; rewrite the affected prompts as part of the workflow.
  4. Package, don’t paste: Prompts ship as files, not invisible comments; discoverable and composable.
  5. Human review: All prompts are readable by another engineer, with examples in context.
ls ai/prompts/
add-billing.md
upgrade-auth-flow.md
write-email-reset.md

Each is parameterized and can be fed to any API-driven code agent without hacking.

Takeaway: A prompt library is not a TODO. It’s a tested, versioned asset.

How to use OTF’s prompts from day one

Nothing fluffy: cloning an OTF kit drops a working ai/prompts/ folder into your project. It already reflects every module and convention.

You can:

  • Feed any prompt directly to OpenRouter, Claude Code, or Cursor — no rewriting.
  • Swap in new agent endpoints (OPENROUTER_API_KEY, etc), all wiring is file-based.
  • Use as source for in-editor completions, in-code CLI triggers, or pre-commit code gen.

Example: running a workflow step with your own key.

OPENROUTER_API_KEY=sk-... \
cursor run \
  --prompt-file ai/prompts/upgrade-billing.md \
  --project-root $PWD

And because every OTF kit ships AI config files (CLAUDE.md, .cursorrules) and tested prompt libraries, upgrade and automation flows behave — reproducible, extendable, modifiable.

Takeaway: Start with a prompt library built for agents, not for Slack threads.

OTF’s angle: the prompt library is the unchanging layer

Framework churn lands hardest on AI workflows: new models, better agents, changing file structures. But prompts — done right — are the durable contract between your codebase and the agent executing on it. Swap the LLM, test the outcome; the prompt library is the anchor in every kit.

You can adopt Cursor, Bolt, Lovable — it doesn’t matter. The prompt library persists, is testable, and you own it.

[[DIAGRAM: agent or tool layer changing rapidly above, prompt library and kit code staying durable underneath]]

Takeaway: The winners in AI-native dev aren’t the ones who chase every new model. They’re the ones who own the substrate the agent runs on: the codebase and the prompts.

Closing: prompts are product, not process

Shipping an OTF kit means inheriting the value of 20+ prompts tested against your actual structure. A chatbox is cheap; a working, evolving prompt library that every agent can use is use. Treat prompts as first-class — own the API your AI tools depend on. The agents will come and go. The contract lives in your prompt library.