caveman

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues or malicious patterns were identified across the skill's instructions or scripts.
  • [REMOTE_CODE_EXECUTION]: The Python scripts (caveman_compressor.py, caveman_lint.py, token_savings_estimator.py) are strictly 'stdlib-only' and do not use external dependencies, remote downloads, or dynamic execution methods such as eval() or exec().
  • [DATA_EXFILTRATION]: There are no network operations (e.g., curl, wget, requests) or sensitive file system access patterns that would indicate data harvesting or exfiltration.
  • [PROMPT_INJECTION]: The instructions in SKILL.md focus on output formatting and conciseness. They do not attempt to bypass agent safety filters or override core behavioral constraints. The inclusion of an 'Auto-Clarity Exception' for security warnings and irreversible actions is a recognized safety best practice.
  • [OBFUSCATION]: The code and documentation are transparent and free of encoded strings, hidden characters, or homoglyph-based deception.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:10 PM
Security Audit — agent-trust-hub — caveman