caveman-setup
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for setting up an LLM spend observability gateway. It correctly emphasizes that secrets (like
CAVE_API_KEY) must be stored in environment variables and added to.gitignore, following security best practices for credential management. - [EXTERNAL_DOWNLOADS]: The skill mentions fetching documentation from a
<docs origin>, which is context-dependent but described as the origin of the skill itself. This is documented neutrally as a configuration/guideline fetch. - [COMMAND_EXECUTION]: The skill includes
curlcommands intended for a one-time verification of the setup. These commands are localized to the integration's purpose, use minimal tokens, and do not access sensitive local files or perform unauthorized network operations.
Audit Metadata