Skip to content
skillsafebeta
← Report library
Purpose / Other

Caveman Commit Skill Security Audit

What the author says it does (original text)

>

Independent security check

No obvious risks found in this check

Files checked
2
Risks found
0
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

4 instruction sections

The Skill generates terse Conventional Commits messages and explicitly limits itself to paste-ready output; it does not stage files, create commits, or amend commits.

View source
SKILL.md:63In the instructionsOpen original file
Only generates the commit message. Does not run `git commit`, does not stage files, does not amend. Output the message as a code block ready to paste. "stop caveman-commit" or "normal mode": revert to verbose commit style.

It requires a Conventional Commits type and imperative wording, with a hard subject-length limit of 72 characters.

View source
SKILL.md:13In the instructionsOpen original file
**Subject line:**- `<type>(<scope>): <imperative summary>` — `<scope>` optional- Types: `feat`, `fix`, `refactor`, `perf`, `docs`, `test`, `chore`, `build`, `ci`, `style`, `revert`- Imperative mood: "add", "fix", "remove" — not "added", "adds", "adding"- ≤50 chars when possible, hard cap 72- No trailing period

For breaking changes, security fixes, data migrations, and reverts, it requires a body that preserves context rather than a subject-only message.

View source
SKILL.md:57In the instructionsOpen original file
## Auto-ClarityAlways include body for: breaking changes, security fixes, data migrations, anything reverting a prior commit. Never compress these into subject-only — future debuggers need the context.

It normally omits AI-attribution text, but explicitly preserves an Assisted-by or AI-attribution trailer when the user's own rules require one.

View source
SKILL.md:30In the instructionsOpen original file
- "As requested by..." — use Co-authored-by trailer- "Generated with Claude Code" or any AI attribution — unless the user's own rule requires an `Assisted-by`/AI-attribution trailer, then add it as a trailer- Emoji (unless project convention requires)
Start here · InstructionsSKILL.md
caveman-commit
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.

File reference map

References: 1
Files making referencesReferenced content
Lines show actual file references, not execution order. Select a node to highlight its connections and inspect the files and source locations. Dashed lines include files that still need locating.
Files and check records2 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included
  • README.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • README.mdSupporting file
  • SKILL.mdInstructions
Lines read
109
File checksum (to compare versions)
3fbede299f0cfc468e5cc560e30b16923a72a78ee7b530619d7044b5cf2d6ad8