Marked Indirect Prompt Injection · Command Execution
Install
npx -y skills add juliusbrussee/caveman --skill caveman-evidence-review --agent claude-codeRun in a terminal. Claude loads the skill when a task calls for it. Check the repo's README before you run it.
Files
Review Caveman evidence
Act as a read-only operator. Build conclusions from current Caveman data, not from repository guesses. Never start, approve, cancel, or roll back an experiment from this skill.
Hard rules
- Keep these buckets separate:
- measured provider-complete list-price cost;
inferreddaily headroom;verifiedledger savings;- evidence cost. Never add or relabel them.
- Do not fetch prompt, completion, tool, or artifact payloads unless the user explicitly asks for payload review. Metadata, spans, timing, models, token counts, status, and optimizer attribution are enough for the default review.
- Scope every read to the project selected by Caveman context. Never supply an organization id.
- Empty results are evidence of no current signal, not zero cost or zero risk.
- Cite trace ids and exact time windows used. Do not claim a cause from an aggregate alone.
Step 1 — Load context
Prefer MCP:
caveman_context {}
CLI fallback:
caveman cloud whoami
caveman cloud projects list
Stop if login or project selection is missing. Ask the user to run
caveman login or select a project; never guess.
Step 2 — Establish baseline
Use caveman_report for:
overviewcostsscoreworkflowsverified_savings
Then use caveman_plan for ranked daily headroom. If question is narrow, skip
unrelated reports. Read shortest set that can answer it.
CLI fallback:
caveman cloud costs
caveman cloud score
caveman cloud plan --json
State report window and basis before interpreting direction.
Step 3 — Test the leading explanation with traces
Use caveman_trace_search. Choose a bounded window and closed filters:
workflow, agent, model, provider, error code, runtime mode, cache status,
optimization id, status class, token/cost/latency bounds, compression, or
monitor verdict.
Useful groupings:
workflow— find jobs driving cost or failures;model— compare model mix;session— isolate retry or loop behavior;- ungrouped — identify exact traces.
Compare a suspect cohort with a control cohort or earlier bounded window. Do not infer causality from one expensive trace.
CLI fallback:
caveman cloud traces search \
--workflow <slug> \
--from <RFC3339> \
--to <RFC3339> \
--sort total_cost_usd \
--dir desc \
--limit 25
Step 4 — Inspect representative traces
Call caveman_trace_get for a small number of high-signal trace ids. Inspect
request and span metadata, latency, status, token counts, cache state, applied
optimizers, and model route. Keep payload retrieval off.
CLI fallback:
caveman cloud traces show <trace-id> --spans
Step 5 — Report
Use this shape:
## Caveman evidence review
Scope: <project> · <from> to <to>
Measured cost: <value and basis>
Verified savings: <ledger value, kept separate>
Inferred headroom: <per-day band, kept separate>
Findings:
1. <finding> — <aggregate evidence> — traces <ids>
2. <finding> — <aggregate evidence> — traces <ids>
Unproven:
- <plausible explanation lacking a control, trace, or eval>
Next read-only check:
- <one bounded query>
Possible action:
- <proposal only; use caveman-manage for read-only lifecycle review and safety gate>
If data is missing, name missing signal and stop at strongest supported statement. Never turn a catalog subtotal into an invoice or an experiment result into verified savings.
Facts
- Kind
- Skill
- Repo
- juliusbrussee/caveman
- Group
- Uncategorized
- Installs
- 89.7k
- Stars
- 111K
- 1find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.3.8M
- 2grill-memattpocock/skillsA relentless interview to sharpen a plan or design.1.3M
- 3grill-with-docsmattpocock/skillsA relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.1.1M
- 4agent-browservercel-labs/agent-browserBrowser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.1.1M
- 5improve-codebase-architecturemattpocock/skillsScan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick.1.1M
- 6tddmattpocock/skillsTest-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-green-refactor", or wants integration tests.1.1M