npm JavaScript analyzed 0.3.38

@hasna/prompts

v0.3.38
npm

Reusable prompt library for AI agents — CLI + MCP server + REST API + web dashboard

maintainer
andreihasna2
licence
Apache-2.0
first seen
2026-09-01
last seen
2026-09-15
releases · 30d
5
short id

@hasna/prompts is an MCP server distributed on npm, maintained by andreihasna2, tracked here since September 2026. It has shipped 43 releases (currently 0.3.38) and exposes 67 tools. Tools include heartbeat, list_agents, prompts_add_dependency, prompts_audit, prompts_body, prompts_bulk_move, and 61 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 67 tools appear to reach filesystem, shell / exec, network, secrets and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 20 of 67
  • heartbeat
  • list_agents
  • prompts_add_dependency
  • prompts_audit
  • prompts_body
  • prompts_bulk_move
  • prompts_bulk_tag
  • prompts_chain
  • prompts_collections
  • prompts_config_get
  • prompts_config_inject
  • prompts_config_list
  • prompts_config_scan
  • prompts_config_set
  • prompts_delete
  • prompts_diff
  • prompts_dispatch
  • prompts_dispatch_get
  • prompts_duplicate
  • prompts_ensure_collection
All 67 tools →
release cadence · 90d 13 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
0.3.38 2026-08-28 npm
0.3.37 2026-08-26 npm
0.3.36 2026-08-25 npm
0.3.35 2026-08-25 npm
0.3.34 2026-08-23 npm
0.3.33 2026-08-17 npm
0.3.32 2026-06-29 npm
0.3.31 2026-06-29 npm
0.3.30 2026-06-27 npm
0.3.29 2026-06-21 npm

view all →