caveman-setup
Warn
Audited by Socket on Aug 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose matches observability setup, but it achieves this by man-in-the-middle routing all LLM traffic through a third-party gateway and, in byok mode, forwarding provider keys to that gateway. No malware or hidden payload is evident, but the data-flow and credential scope are high-risk for a setup skill.
Confidence: 91%Severity: 82%
Audit Metadata