caveman-setup

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate instructions for setting up an LLM spend observability gateway. It correctly emphasizes that secrets (like CAVE_API_KEY) must be stored in environment variables and added to .gitignore, following security best practices for credential management.
  • [EXTERNAL_DOWNLOADS]: The skill mentions fetching documentation from a <docs origin>, which is context-dependent but described as the origin of the skill itself. This is documented neutrally as a configuration/guideline fetch.
  • [COMMAND_EXECUTION]: The skill includes curl commands intended for a one-time verification of the setup. These commands are localized to the integration's purpose, use minimal tokens, and do not access sensitive local files or perform unauthorized network operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 02:16 PM