菜单
Quick-reference card for all caveman modes, skills, and commands. One-shot display, not a persistent mode. Trigger: /caveman-help, "caveman help", "what caveman commands", "how do I use caveman".
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Decision guide for delegating to caveman-style subagents. Tells the main thread WHEN to spawn `cavecrew-investigator` (locate code), `cavecrew-builder` (1-2 file edit), or `cavecrew-reviewer` (diff review) instead of doing the work inline or using vanilla `Explore`. Subagent output is caveman-compressed so the tool-result injected back into main context is ~60% smaller — main context lasts longer across long sessions. Trigger: "delegate to subagent", "use cavecrew", "spawn investigator/builder/reviewer", "save context", "compressed agent output".
Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says "caveman mode", "talk like caveman", "use caveman", "less tokens", "be brief", or invokes /caveman. Also auto-triggers when token efficiency is requested.
Compresses natural language files (markdown, text) into caveman-speak to reduce input token usage ~46%. Backs up original before overwriting. Only touches prose — code blocks stay exact. Trigger: /caveman:compress <filepath>, or user asks to compress a memory/doc file.
White-box code security audit. 5-phase protocol covering 55+ vulnerability types across 9 languages (Java, Python, Go, PHP, JS/TS, C/C++, C#, Ruby, Rust) and 10 security dimensions (D1-D10). Dual-track model: sink-driven + control-driven. Taint analysis, anti-hallucination verification. Writes CODE-AUDIT.md — read-only, no code changes. Human triages findings. Integrates Semgrep MCP when available.
Security-focused code review. Scans the current branch diff for vulnerabilities: injection, broken auth, authorization bypasses, cryptographic weaknesses, sensitive data exposure, and supply chain risks. Writes findings to SECURITY-REVIEW.md — read-only, no code changes. Human decides what to fix. Integrates Semgrep MCP when available.
Active web security scanner. Probes a live URL for security misconfigurations, exposed sensitive files, HTTP security headers, SSL/TLS issues, CORS policy, and information disclosure. Uses only curl + python3 — no extra tools needed. Only scan targets you own or have explicit written authorization to test.
| name | caveman-help |
| description | Quick-reference card for all caveman modes, skills, and commands. One-shot display, not a persistent mode. Trigger: /caveman-help, "caveman help", "what caveman commands", "how do I use caveman". |
Display this reference card when invoked. One-shot — do NOT change mode, write flag files, or persist anything. Output in caveman style.
| Mode | Trigger | What change |
|---|---|---|
| Lite | /caveman lite | Drop filler. Keep sentence structure. |
| Full | /caveman | Drop articles, filler, pleasantries, hedging. Fragments OK. Default. |
| Ultra | /caveman ultra | Extreme compression. Bare fragments. Tables over prose. |
| Wenyan-Lite | /caveman wenyan-lite | Classical Chinese style, light compression. |
| Wenyan-Full | /caveman wenyan | Full 文言文. Maximum classical terseness. |
| Wenyan-Ultra | /caveman wenyan-ultra | Extreme. Ancient scholar on a budget. |
Mode stick until changed or session end.
| Skill | Trigger | What it do |
|---|---|---|
| caveman-commit | /caveman-commit | Terse commit messages. Conventional Commits. ≤50 char subject. |
| caveman-review | /caveman-review | One-line PR comments: L42: bug: user null. Add guard. |
| caveman-compress | /caveman:compress <file> | Compress .md files to caveman prose. Saves ~46% input tokens. |
| caveman-help | /caveman-help | This card. |
| cavecrew | /cavecrew | Decision guide for spawning compressed subagents. |
Say "stop caveman" or "normal mode". Resume anytime with /caveman.
Default mode = full. Resolution: explicit command → env var → ironcode.json → full.
Env var:
export CAVEMAN_DEFAULT_MODE=ultra
IronCode config (~/.config/ironcode/ironcode.json):
{ "caveman": { "defaultMode": "lite" } }
Set "off" to disable auto-activation. User can still activate manually with /caveman.
Full docs: https://github.com/JuliusBrussee/caveman