caveman-compress@r1

CAUTION

Publisher claims: "Compress a memory file such as CLAUDE.md or a todo list into caveman format to save input tokens, keeping a readable backup. Sends the file's text to the configured model provider. Trigger: /caveman-compress. " Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher juliusbrussee · joined 2 days agoInstalls 409KLast detonated 33 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsscripts/compress.py:74 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

References a credential file in the home directoryscripts/compress.py:69 · References a credential file in the home directory

AST03

CRITICAL

Access to sensitive file pathsscripts/detect.py:93 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/detect.py:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/compress.py:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/compress.py:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/compress.py:73 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandscripts/compress.py:160 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Python subprocess execution detectedscripts/compress.py:532 · Python subprocess execution detected

AST05