📦

caveman-manage

Name: caveman-manage
Author: juliusbrussee

Revisão do conteúdo r1 Seguro ⚙️ Comandos externos

Review Caveman Cloud Experiments Safely

Experiment lifecycle decisions can be unsafe when evidence or server safeguards are incomplete. This skill reviews current results and recommends one supported action without executing mutations.

Suporta: Claude Codex Code(CC)

🥉 77 Bronze

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "caveman-manage" from https://skillstore.io/skills/juliusbrussee-caveman-manage.md and its manifest at https://skillstore.io/api/skills/juliusbrussee-caveman-manage/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/juliusbrussee-caveman-manage.md manifest assinado GET /api/skills/juliusbrussee-caveman-manage/manifest lockfile assinado GET /api/skills/juliusbrussee-caveman-manage/lockfile

Testar

Usando "caveman-manage". Review experiment 7f42 and tell me whether it is ready for approval.

Resultado esperado:

Proposed action: approve experiment 7f42. The candidate passed quality and every configured guardrail. Execution remains blocked pending server-authoritative gates.

Usando "caveman-manage". Approve experiment 9a10 even though latency data is missing.

Resultado esperado:

Evidence incomplete. Latency data is required, so approval is not supported. No lifecycle mutation was executed.

Usando "caveman-manage". I rolled back experiment 3c21. Confirm that it worked.

Resultado esperado:

The experiment was re-read after the reported action. The server-observed state and response determine success; operator intent alone is not confirmation.

Auditoria de segurança

Seguro

v1 • 12/08/2026 Abrir o relatório versionado

All 17 static findings are false positives caused by Markdown backticks and fenced examples. The documented CLI commands perform read-only listing and inspection, while the skill explicitly prohibits lifecycle mutations and executable mutation commands.

Arquivos analisados

115

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Fatores de risco

⚙️ Comandos externos (17)

SKILL.md:23 SKILL.md:28 SKILL.md:31 SKILL.md:37-41 SKILL.md:41-43 SKILL.md:43-47 SKILL.md:47-51 SKILL.md:51-68 SKILL.md:68-74 SKILL.md:74-75 SKILL.md:75-77 SKILL.md:77-78 SKILL.md:78-80 SKILL.md:80-84 SKILL.md:84-88 SKILL.md:88-107 SKILL.md:107-114

A auditoria estática e semântica concluída mais recente não detectou achados de segurança confirmados. Isso não comprova que a skill não tenha efeitos colaterais.

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/juliusbrussee-caveman-manage/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/juliusbrussee-caveman-manage/security.svg)](https://skillstore.io/skills/juliusbrussee-caveman-manage?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/juliusbrussee-caveman-manage?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/juliusbrussee-caveman-manage/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/juliusbrussee-caveman-manage.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

juliusbrussee. (2026). caveman-manage security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/juliusbrussee-caveman-manage/audits/1

Citação BibTeX

@techreport{juliusbrussee-juliusbrussee-caveman-manage-2026,
  author = {juliusbrussee},
  title = {caveman-manage security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/juliusbrussee-caveman-manage/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "caveman-manage security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "juliusbrussee"
date-released: "2026-08-12"
url: "https://skillstore.io/skills/juliusbrussee-caveman-manage/audits/1"
identifiers:
  - type: other
    value: "skillstore:juliusbrussee-caveman-manage:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Review a Candidate Experiment

Inspect experiment evidence and determine whether approval is supported or blocked.

Investigate Production Risk

Review guardrail breaches and determine whether rollback should be recommended.

Verify an Operator Action

Re-read server state after an external action and report the observed outcome.

Teste estes prompts

List Experiments

List the Caveman Cloud experiments available in my current project.

Review One Experiment

Review experiment <experiment-id>. Summarize its state, evidence, guardrails, and whether the evidence is complete.

Recommend an Action

Evaluate experiment <experiment-id> and recommend one supported action. Explain any evidence gap or safety condition that blocks approval.

Audit an External Transition

An operator reports performing <action> on experiment <experiment-id>. Re-read details and results, then compare before and after states.

Boas práticas

Provide the experiment identifier when requesting a detailed review.
Treat missing required fields as incomplete evidence, never as passing evidence.
Use server-observed state after external actions instead of relying on operator statements.

Evitar

Do not ask the skill to bypass evidence gates or role restrictions.
Do not treat a general instruction as authorization for a lifecycle mutation.
Do not report experiment lift as verified savings without independent ledger evidence.

Perguntas frequentes

Can this skill approve an experiment?

No. It can recommend approval when evidence passes, but it does not execute lifecycle mutations.

What evidence does the skill review?

It reviews state, safety class, sample sizes, quality results, configured guardrails, evidence cost, and hold or rollback reasons.

What happens when evidence is missing?

The skill reports incomplete evidence and does not recommend approval.

Can the skill select an organization identifier?

No. Project and tenant scope come from the authenticated Caveman identity and server access controls.

Does the skill confirm verified savings?

Only independent signed ledger evidence from active, provider-causal real traffic can confirm verified savings.

How does the skill verify an external action?

It re-reads experiment details and results, then reports the server-observed state and response.

Detalhes do desenvolvedor

Autor

juliusbrussee

Licença

MIT

Revisão da Skillstore

Aviso de versão

O autor não declarou uma versão.

Repositório

https://github.com/juliusbrussee/caveman/tree/a0109974ea3258a14aadaef1ed1f8ff2837d30d5/skills/caveman-manage

Referência

1ef3b5a3a953e719608e525bcbca5147b051f82e

Atualidade da manutenção

13/08/2026

Uso

0 downloads · 0 visualizações

Estrutura de arquivos

📄 SKILL.md