# JuliusBrussee/caveman

🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman

- **Type:** Collection
- **Trust:** 60/100 (B), scored on the content rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Author:** JuliusBrussee
- **License:** MIT
- **Source:** https://github.com/JuliusBrussee/caveman

## Trust

60/100 (B), scored on the content rubric
- Publisher verified: no
- Install scripts: nothing suspicious found
- Prompt-injection scan: clean
- Obfuscation scan: clean
- Evidence age: 35 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-08-28T18:37:32.157Z
- **Version scanned:** HEAD
- **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it.

## Tools

40 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `caveman_delegate` — Run a bounded, mechanical subtask (search, test run, log triage, bulk edit) in a token-efficient worker agent and return its report. Prefer this over spawning a
- `do_thing` — Detailed tool description for OpenAI chat fixture.
- `read_file` — Read a UTF-8 file from the workspace. Optional offset/limit read a line range.
- `grep` — Search the workspace for a regular expression with ripgrep (grep fallback).
- `bash` — Run one shell command in the workspace and return its combined stdout and stderr.
- `edit_file` — Replace an exact string in a workspace file. The old string must appear exactly
- `poll` — Poll a queue.
- `advance` — Advance host state.
- `lookup` — Look something up.
- `delegate` — Delegate.
- `peek` — Return a fixed value.
- `lookup_policy` — Read policy.
- `send_message` — Send external message.
- `conditional_read`
- `deep_read` — Read deep local module value.
- `nested_read` — Read child local module value.
- `nested_home_read` — Attempt host-home read from child sandbox.
- `delegate_deep` — Delegate to grandchild.
- `delegate_child` — Delegate to child.
- `modular_read` — Read value from locked local tool module.
- `noisy_stdout` — Write to stdout, then return a real result.
- `late_reject` — Return a value, then float an unhandled rejection.
- `nonserializable_result` — Return a value JSON cannot encode.
- `home_read` — Attempt host-home read.
- `network_read` — Attempt undeclared network.
- `tcp_connect` — Attempt raw TCP egress via a net.Socket instance.
- `dns_read` — Attempt DNS exfiltration.
- `udp_write` — Attempt UDP exfiltration.
- `child_process` — Attempt undeclared child process.
- `delayed_child_effect` — Spawn delayed UDP side effect, then ignore timeout.
- `ignore_timeout` — Ignore SIGTERM and tool timeout.
- `write_workspace` — Write ephemeral workspace marker.
- `live_write` — Explicit live-mode sandbox write.
- `read_workspace` — Read prior workspace marker.
- `grandchild` — Delegate again.
- `child` — Delegate.
- `standard_lookup` — Lookup.
- `explicit_schema` — Use explicit provider schema.
- `continue_once` — Continue once.
- `loop` — Loop.

## Install

This is a collection — a bundle whose contents each install separately and are not individually verified. Resolve the unit you want and plan that install instead.

## Blast radius

Extensive to critical — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: mutates data; installs 28 bundled units.
- Floor 37, ceiling 73 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/JuliusBrussee%2Fcaveman
- Install plan: https://forgeregistry.com/api/v1/packages/JuliusBrussee%2Fcaveman/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/JuliusBrussee%2Fcaveman
- HTML page: https://forgeregistry.com/registry/JuliusBrussee%2Fcaveman
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.