Caveat verdict

beddel

🟢 Trusted

No high-risk patterns surfaced by the deep scan — automated capability review, not behavioral proof.

Installs packages AND executes processes

Beddel is a legitimate YAML workflow engine SDK that runs LLM pipelines; all capabilities (package_install, process_exec) align directly with installing and executing a documented Python SDK, with no exfiltration or deceptive behavior.

Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

security

transparency

maintenance

What it does

These are capability combinations: each listed behavior occurs in the skill, but Caveat detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.

Capability combination high

Installs packages AND executes processes — opaque dependency chain with execution

LLM03 · ASI04

Permission integrity

Installs packages at runtime — transitive dependencies are not auditable

package_install

Findings (2)

Pattern match critical

Possible hardcoded credential

SKILL.md · code · API_KEY="your-key

Pattern match high

subprocess execution — runs system commands from Python

SKILL.md · code · subprocess.run(

Why the tier is capped

Execution sink present in raw bytes (Hard Floor: class D). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.

Permissions & capabilities

Requires 1 environment variable. (1 sensitive: [GEMINI_API_KEY]). Requires 1 system binary.

package_installprocess_exec

I installed anyway

Check another skill Browse the registry Auditing your own skills or configs? Use the API