caveman-learn
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill integrates with a local CLI tool named
cavemanto perform token analysis, simulation, and memory operations. Commands such ascaveman learn report,caveman mem remember, andcaveman learn applyare central to the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files (e.g.,
CLAUDE.md,AGENTS.md) and JSON reports generated by thecavemanCLI. This creates a surface where malicious instructions embedded in the analyzed content could influence the agent's behavior during the optimization process. The skill mitigates this by requiring explicit user consent for every change and verifying content hashes before processing. - [DYNAMIC_EXECUTION]: The skill can generate and write new instruction files (skills) to the filesystem based on observed repetitive tool usage patterns. This automated code generation is consent-gated and monitored by a holdout experiment harness to verify efficacy.
Audit Metadata