Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Stop Guessing If Your Prompt Is Better

You rewrote your prompt. The output looks different. But is it actually better? Most of us have been there — reading prompt engineering best practices, tweaking instructions, and hoping the changes help. But without comparison, you're j…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

You rewrote your prompt. The output looks different. But is it actually better?



Most of us have been there — reading prompt engineering best practices, tweaking instructions, and hoping the changes help. But without comparison, you're just guessing.






The Problem



When you improve a prompt, you typically:




  1. Run the new version

  2. Look at the output

  3. Think "yeah, this seems better"



But you're comparing against your memory of the old output. Different runs produce different results anyway. How do you know the improvement came from your changes and not just LLM variance?






What I Built



rashomon is a Claude Code plugin that focuses on one practical question: "Did my instruction change actually affect the result?"



It analyzes your prompt, generates an optimized version, runs both in isolated environments, and compares the actual results.






Real Example



I ran this prompt through rashomon:




Add logging to track function calling usage





A reasonable instruction. But vague.





What rashomon detected
























Issue Detail
Vague instructions What, where, and why to log are unclear
No output format Log structure not specified
Missing context No project architecture information




The optimized prompt





## Context

This is a Slack bot using Google Gemini API with function calling.
The project uses a shared `logger` utility with structured logging.
Function calling flows through:
1. `GeminiService.executeWithRetry()` - detects function calls
2. `FunctionHandler.handleFunctionCall()` - executes them

## Task

Add logging to track function calling usage for analytics and debugging.

## Requirements

At Function Call Detection (GeminiService):
- Function name(s) detected
- Number of function calls in response

At Function Execution (FunctionHandler):
- Parameters passed (sanitized - exclude sensitive data)
- Execution duration
- Result status (success/failure)

## Output Format

logger.info('Function call detected', {
functionName: 'executeWithRetry',
detectedFunctions: ['searchNotionPages'],
functionCallCount: 1
})







What changed




























Aspect Original Optimized
Logging Scope 1 stage (execution only) 2 stages (detection + execution)
Parameter Sanitization None Passwords, tokens, secrets redacted
Files Modified 2 2


The original prompt looked reasonable, but led the agent to log at only one point. The optimized version covered both detection and execution — with security considerations the original didn't address.



Classification: Structural Improvement





About Variance



Not every difference is an improvement. rashomon distinguishes between structural gains and mere variance.



I tried to create a Variance example — a prompt so clear that optimization wouldn't matter. I couldn't. In practice, the same vague prompt sometimes works beautifully, sometimes completely misses the point.



rashomon just makes that inconsistency visible.





Try It



Requires Claude Code.



claude
/plugin marketplace add shinpr/rashomon
/plugin install rashomon@rashomon
# Restart session
/rashomon Your prompt here









GitHub logo

shinpr
/
rashomon



Compare, improve, and verify prompt changes with evidence — not vibes.







Rashomon



Claude Code
License


See what actually changes when you improve your prompts — not just different wording.



Why rashomon?





Inspired by the Rashomon effect — the idea that the same event can produce different outcomes depending on perspective
rashomon makes those differences explicit and comparable.





  • Spending too much time on trial-and-error with prompts?

  • Read best practices but not sure how they apply to your case?

  • Want proof that your changes actually made things better?



rashomon analyzes, improves, and compares prompts—so you can see what actually changed, and whether it matters.




Who Is This For?




rashomon is designed for:




  • Developers using Claude Code daily

  • Teams iterating on complex prompts (coding, analysis, writing)

  • Anyone who wants evidence, not vibes, when improving prompts



Not ideal if:




  • You don't use git

  • You want one-shot prompt rewriting without comparison




Quick Example





/rashomon Write a function to sort an array


What You Get





1. Detected Issues




- BP-002
…




1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
Syntax validiert (0 Fehler)
title: Detect Exploitation - Stop Guessing If Your Prompt Is Better
id: d57fe60b-a2ef-4a44-b0a1-2c5fff345743
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "Stop Guessing If Your Prompt I" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Stop Guessing If Your Prompt Is Better")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Stop Guessing If Your Prompt Is Better*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Stop Guessing If Your Prompt Is Better"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Stop Guessing If Your Prompt Is Better.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Stop Guessing If Your Prompt Is Better

Thematisch verwandte Begriffe: Stop, Guessing, Your, Prompt · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-85291 | InvoicePlane is a self-hosted open source application for managing invoi…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag