Habilidades caveman-discover
📦

caveman-discover

Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos

Label LLM Workflows for Caveman Cloud

Unlabeled LLM traffic hides which jobs create spend. This skill discovers repository workflows, proposes durable labels, applies approved changes, and verifies attribution.

Compatible con: Claude Codex Code(CC)
📊 70 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "caveman-discover" from https://skillstore.io/skills/juliusbrussee-caveman-discover.md and its manifest at https://skillstore.io/api/skills/juliusbrussee-caveman-discover/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/juliusbrussee-caveman-discover.md Manifest firmado GET /api/skills/juliusbrussee-caveman-discover/manifest Lockfile firmado GET /api/skills/juliusbrussee-caveman-discover/lockfile

Pruébalo

Usando "caveman-discover". Discover workflows in a service with a support endpoint and nightly summary job.

Resultado esperado:

  • support-reply: answers inbound support tickets from the reply handler.
  • nightly-digest: creates the scheduled summary from the digest job.
  • Approval required before applying either label.

Usando "caveman-discover". Report results after labeling one routed workflow and finding one direct provider call.

Resultado esperado:

Labeled support-reply and verified its request succeeded. The direct evaluation call remains not wired because it bypasses the Caveman gateway.

Usando "caveman-discover". Handle an unclear evaluation script during discovery.

Resultado esperado:

Proposed eval-suite with review status because its purpose was inferred from the filename. No edit was applied pending confirmation.

Auditoría de seguridad

Riesgo medio
v1 • 12/8/2026 Abrir el informe versionado

All 26 static findings are false positives caused by Markdown backticks, fenced examples, and inline technical identifiers in SKILL.md. The skill does direct approved code changes and repository-native command execution, creating a moderate operational risk when used on untrusted projects.

1
Archivos escaneados
119
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio
SKILL.md:92-93
Untrusted Repository Command Execution
The skill directs the agent to run a repository test, development script, or curl command, which may execute project-controlled behavior.
Lines 92-93 explicitly require exercising a labeled path with repository tooling or curl. The command is unspecified and therefore may inherit untrusted side effects.

Factores de riesgo

⚙️ Comandos externos (25)
SKILL.md:16 SKILL.md:23 SKILL.md:36 SKILL.md:42 SKILL.md:47 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:57 SKILL.md:63-69 SKILL.md:69-73 SKILL.md:73-74 SKILL.md:74-76 SKILL.md:76 SKILL.md:77 SKILL.md:78-81 SKILL.md:81 SKILL.md:82-83 SKILL.md:83-94 SKILL.md:94-95 SKILL.md:95-101 SKILL.md:101-111 SKILL.md:111-114 SKILL.md:114-117
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/juliusbrussee-caveman-discover/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/juliusbrussee-caveman-discover/security.svg)](https://skillstore.io/skills/juliusbrussee-caveman-discover?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/juliusbrussee-caveman-discover?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/juliusbrussee-caveman-discover/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/juliusbrussee-caveman-discover.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

juliusbrussee. (2026). caveman-discover security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/juliusbrussee-caveman-discover/audits/1

Cita BibTeX

@techreport{juliusbrussee-juliusbrussee-caveman-discover-2026, author = {juliusbrussee}, title = {caveman-discover security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/juliusbrussee-caveman-discover/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "caveman-discover security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "juliusbrussee" date-released: "2026-08-12" url: "https://skillstore.io/skills/juliusbrussee-caveman-discover/audits/1" identifiers: - type: other value: "skillstore:juliusbrussee-caveman-discover:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
55
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
91
Cumplimiento de la especificación

Lo que puedes crear

Attribute Product AI Spend

Separate support, onboarding, and reporting costs by the product job that generated each request.

Label Scheduled Automation

Identify cron jobs, queue workers, and CI tasks that consume LLM tokens and assign stable labels.

Audit Agent Workflows

Map graphs, agents, chains, and evaluation suites into distinct workflows before reviewing their spend.

Prueba estos prompts

Discover Workflows 
Discover LLM workflows in this repository. Present the proposed workflow table, but do not edit files yet.
Review Workflow Names 
Review the proposed workflow labels for valid syntax, clear job names, and uncertain purposes. Mark uncertain labels for review.
Apply Approved Labels 
Apply the approved workflow labels with minimal changes. Label callers, preserve repository style, and list calls without Caveman gateway routing.
Verify and Report 
Verify one labeled path using the repository's existing method. Report observed results, dashboard timing, unlabeled traffic, and unresolved workflow names.

Mejores prácticas

  • Review and approve the workflow table before any repository files change.
  • Name each human-recognizable job instead of its provider, model, or shared helper.
  • Inspect verification commands and referenced scripts before running them.

Evitar

  • Do not label a shared LLM helper when several distinct jobs call it.
  • Do not invent a workflow purpose when repository evidence is unclear.
  • Do not claim dashboard verification before the labeled workflow actually runs.

Preguntas frecuentes

Does this skill configure the Caveman gateway?
No. The repository must already route LLM requests through the Caveman gateway.
Will it modify code without approval?
No. It presents a workflow table and waits for user approval before applying changes.
Which LLM entry points can it inspect?
It covers handlers, scheduled jobs, workers, scripts, evaluations, agents, chains, and raw HTTP calls.
How are workflow names chosen?
Names describe stable human-recognizable jobs and follow the gateway's lowercase slug rules.
What happens when a workflow purpose is unclear?
The skill derives a tentative slug from the filename and marks it for review.
When do labels appear in Caveman Cloud?
Each label appears after its workflow next runs and sends traffic through the gateway.

Detalles del desarrollador

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/juliusbrussee/caveman/tree/a0109974ea3258a14aadaef1ed1f8ff2837d30d5/skills/caveman-discover

Ref.

95244ee20a58fc3ea629a87b9e746dbc45854aa0

Actualidad del mantenimiento

13/8/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md