caveman
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were identified across the skill's instructions or scripts.
- [REMOTE_CODE_EXECUTION]: The Python scripts (
caveman_compressor.py,caveman_lint.py,token_savings_estimator.py) are strictly 'stdlib-only' and do not use external dependencies, remote downloads, or dynamic execution methods such aseval()orexec(). - [DATA_EXFILTRATION]: There are no network operations (e.g.,
curl,wget,requests) or sensitive file system access patterns that would indicate data harvesting or exfiltration. - [PROMPT_INJECTION]: The instructions in
SKILL.mdfocus on output formatting and conciseness. They do not attempt to bypass agent safety filters or override core behavioral constraints. The inclusion of an 'Auto-Clarity Exception' for security warnings and irreversible actions is a recognized safety best practice. - [OBFUSCATION]: The code and documentation are transparent and free of encoded strings, hidden characters, or homoglyph-based deception.
Audit Metadata