caveman-setup@r1

CAUTION

Publisher claims: "Wire a repository through the Caveman Cloud gateway so every LLM request is measured, with no behavior change. Use for "set up caveman" or adding LLM spend observability. " Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher juliusbrussee · joined 2 days agoInstalls 99,975Last detonated 31 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsSKILL.md:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsSKILL.md:89 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressSKILL.md:16 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Access to sensitive file pathsSKILL.md:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressSKILL.md:16 · URL using raw IP address — may bypass domain-based filtering

AST07

CRITICAL

Access to sensitive file pathsSKILL.md:87 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05