caveman-manage
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows a 'fail-closed' security model, requiring that all unknown states, server errors, or missing evidence results in a blocked recommendation.
- [SAFE]: The agent is explicitly instructed to operate in a read-only capacity, with lifecycle mutations being strictly blocked even if user approval is provided.
- [SAFE]: Identity and access control are handled by ensuring organization, project, and tenant scopes are derived from the authenticated session and RBAC rather than user-supplied input.
- [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized external dependencies was found in the instructions or command fallbacks.
Audit Metadata