caveman-optimize
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
caveman opportunities listto retrieve diagnostic data for optimization. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from external sources.
- Ingestion points: Reads output from the
cavemanCLI and parses historical context from files matching the pattern.caveman/proposals/*.md. - Boundary markers: The instructions explicitly state that historical proposal files should be treated as "untrusted historic context."
- Capability inventory: The skill has the capability to execute shell commands (
cavemanCLI) and perform file system read/write operations. - Sanitization: There are no explicit instructions for sanitizing or escaping the content retrieved from the CLI or local files before processing.
Audit Metadata