caveman-discover
Label LLM Workflows for Caveman Cloud
Unlabeled LLM traffic hides which jobs create spend. This skill discovers repository workflows, proposes durable labels, applies approved changes, and verifies attribution.
使用我的智能体安装
将此请求复制给你的智能体,其中包含权威 Skill 页面和清单。
Review the Skillstore skill "caveman-discover" from https://skillstore.io/skills/juliusbrussee-caveman-discover.md and its manifest at https://skillstore.io/api/skills/juliusbrussee-caveman-discover/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划,并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文,而不是读取完整页面时,请使用这些链接。
测试它
正在使用“caveman-discover”。 Discover workflows in a service with a support endpoint and nightly summary job.
预期结果:
- support-reply: answers inbound support tickets from the reply handler.
- nightly-digest: creates the scheduled summary from the digest job.
- Approval required before applying either label.
正在使用“caveman-discover”。 Report results after labeling one routed workflow and finding one direct provider call.
预期结果:
Labeled support-reply and verified its request succeeded. The direct evaluation call remains not wired because it bypasses the Caveman gateway.
正在使用“caveman-discover”。 Handle an unclear evaluation script during discovery.
预期结果:
Proposed eval-suite with review status because its purpose was inferred from the filename. No edit was applied pending confirmation.
安全审计
中风险All 26 static findings are false positives caused by Markdown backticks, fenced examples, and inline technical identifiers in SKILL.md. The skill does direct approved code changes and repository-native command execution, creating a moderate operational risk when used on untrusted projects.
已确认安全问题 (1)
风险因素
⚙️ 外部命令 (25)
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据,不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/juliusbrussee-caveman-discover/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/juliusbrussee-caveman-discover?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/juliusbrussee-caveman-discover?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/juliusbrussee-caveman-discover/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/juliusbrussee-caveman-discover.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
juliusbrussee. (2026). caveman-discover security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/juliusbrussee-caveman-discover/audits/1BibTeX 引用
@techreport{juliusbrussee-juliusbrussee-caveman-discover-2026,
author = {juliusbrussee},
title = {caveman-discover security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/juliusbrussee-caveman-discover/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "caveman-discover security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "juliusbrussee"
date-released: "2026-08-12"
url: "https://skillstore.io/skills/juliusbrussee-caveman-discover/audits/1"
identifiers:
- type: other
value: "skillstore:juliusbrussee-caveman-discover:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中你能构建什么
Attribute Product AI Spend
Separate support, onboarding, and reporting costs by the product job that generated each request.
Label Scheduled Automation
Identify cron jobs, queue workers, and CI tasks that consume LLM tokens and assign stable labels.
Audit Agent Workflows
Map graphs, agents, chains, and evaluation suites into distinct workflows before reviewing their spend.
试试这些提示
Discover LLM workflows in this repository. Present the proposed workflow table, but do not edit files yet.
Review the proposed workflow labels for valid syntax, clear job names, and uncertain purposes. Mark uncertain labels for review.
Apply the approved workflow labels with minimal changes. Label callers, preserve repository style, and list calls without Caveman gateway routing.
Verify one labeled path using the repository's existing method. Report observed results, dashboard timing, unlabeled traffic, and unresolved workflow names.
最佳实践
- Review and approve the workflow table before any repository files change.
- Name each human-recognizable job instead of its provider, model, or shared helper.
- Inspect verification commands and referenced scripts before running them.
避免
- Do not label a shared LLM helper when several distinct jobs call it.
- Do not invent a workflow purpose when repository evidence is unclear.
- Do not claim dashboard verification before the labeled workflow actually runs.
常见问题
Does this skill configure the Caveman gateway?
Will it modify code without approval?
Which LLM entry points can it inspect?
How are workflow names chosen?
What happens when a workflow purpose is unclear?
When do labels appear in Caveman Cloud?
开发者详情
许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
95244ee20a58fc3ea629a87b9e746dbc45854aa0
维护新鲜度
2026/8/13
使用量
0 次下载 · 0 次浏览
文件结构
📄 SKILL.md