caveman-run
>-
Install this skill
or
88/100
Security score
The caveman-run skill was audited on Aug 25, 2026 and we found 4 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 231
Command substitution pattern
SourceSKILL.md
| 229 | - `wait -p VAR -n` (bash 5.1+) — и узнать, КТО именно. |
| 230 | - `wait -f PID` — ждать реальной смерти, а не «остановки» (kill -STOP). |
| 231 | - Максимум ожидания: `DEADLINE=$((SECONDS+1800)); while kill -0 $PID 2>/dev/null && [ $SECONDS -lt $DEADLINE ]; do sleep 5; done` (SO 10028820). Самому процессу — `timeout -k 5 1800 cmd` (SIGTERM, потом -k SIGKILL). |
| 232 | |
| 233 | ### 🟢 Уведомление о смерти (локально + в телефон) |
low line 238
Command substitution pattern
SourceSKILL.md
| 236 | |
| 237 | ```bash |
| 238 | GPS=$(pgrep -f 'gnome-s[h]ell' | head -1) |
| 239 | export $(tr '\0' '\n' < /proc/$GPS/environ 2>/dev/null | grep -E '^(DISPLAY|WAYLAND_DISPLAY|XAUTHORITY|XDG_RUNTIME_DIR)=' | tr '\n' ' ') |
| 240 | notify-send "my-app умер" "rc=$RC" |
low line 239
Command substitution pattern
SourceSKILL.md
| 237 | ```bash |
| 238 | GPS=$(pgrep -f 'gnome-s[h]ell' | head -1) |
| 239 | export $(tr '\0' '\n' < /proc/$GPS/environ 2>/dev/null | grep -E '^(DISPLAY|WAYLAND_DISPLAY|XAUTHORITY|XDG_RUNTIME_DIR)=' | tr '\n' ' ') |
| 240 | notify-send "my-app умер" "rc=$RC" |
| 241 | ``` |
medium line 247
Curl to non-GitHub URL
SourceSKILL.md
| 245 | ```bash |
| 246 | TOKEN="ТОКЕН_ОТ_BotFather"; CHAT_ID="ТВОЙ_ID" |
| 247 | curl -s -X POST "https://api.telegram.org/bot$TOKEN/sendMessage" -d chat_id=$CHAT_ID -d text="my-app УМЕР rc=$RC" |
| 248 | ``` |
| 249 |
Scanned on Aug 25, 2026
View Security Dashboard