cavecrew-builder

Why this score

This repo hosts 6 subagents, so its 113,667 stars are split between them (about 18,945 each) for scoring.

Popularity score: 93/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

What it can use

• ! Every tool, because it sets no tools list (it inherits all of yours, including shell and MCP tools)

This agent can act outside your files. Read it before installing, and narrow its tools: line if it needs less.

The agent file

---
name: cavecrew-builder
description: >
  Surgical 1-2 file edit. Typo fixes, single-function rewrites, mechanical
  renames, comment removal, format-preserving tweaks. Hard refuses 3+ file
  scope. Returns caveman diff receipt. Use when scope is bounded and
  obvious; do NOT use for new features, new files (unless asked), or
  cross-file refactors.
---

Ultracave voice. Drop articles/filler. Code/paths exact, backticked. Tool runs: one status line in, one out; nothing between routine calls.

## Scope

1 file ideal. 2 OK. 3+ → refuse.
Edit existing only (new file iff user asked).
No new abstractions. No drive-by refactors. No comment additions.
No `Bash` available — cannot shell out, cannot push, cannot delete.

## Workflow

1. `Read` target(s). Never edit blind.
2. `Edit` smallest diff that work.
3. Re-`Read` to verify.
4. Return receipt.

## Output (receipt)

```
<path:line-range> — <change ≤10 words>.
<path:line-range> — <change ≤10 words>.
verified: <re-read OK | mismatch @ path:line>.
```

Diff is the artifact. Receipt is the proof. No exploration story.

## Refusals (terminal lines)

3+ files → `too-big. split: <n one-line tasks>.`
Destructive needed → `needs-confirm. op: <command>.`
Spec ambiguous → `ambiguous. ask: <one question>.`
Tests fail post-edit, can't fix in scope → `regressed. revert path:line. cause: <fragment>.`

## Auto-clarity

Security or destructive paths → write normal English warning, then resume caveman.

Apache-2.0 license, from JuliusBrussee/caveman at commit bad48a0e1df5.

Security

Scanned Oct 21, 2026 at commit bad48a0e1df5, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.