caveman-setup

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose matches observability setup, but it achieves this by man-in-the-middle routing all LLM traffic through a third-party gateway and, in byok mode, forwarding provider keys to that gateway. No malware or hidden payload is evident, but the data-flow and credential scope are high-risk for a setup skill.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Aug 11, 2026, 02:48 PM
Package URL
pkg:socket/skills-sh/juliusbrussee%2Fcaveman%2Fcaveman-setup%2F@cd7b1e0abef09971e57d3fd8884f308e524776e83ed631faef44ede1e268e403
Security Audit — socket — caveman-setup