slop-detector

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses local tools (Read, Grep, TodoWrite) to perform text analysis on markdown files. It does not initiate external network connections or download untrusted code.
  • [SAFE]: Configuration discovery follows standard security practices by walking up the directory tree to find .slop-config.yaml within the project root.
  • [SAFE]: Command execution is limited to benign local utilities like grep and wc for the purpose of counting word frequencies and punctuation marks.
  • [SAFE]: History tracking and metrics storage are performed locally in a designated .slop-history directory, following standard logging patterns.
  • [SAFE]: No obfuscation, hardcoded credentials, or privilege escalation patterns were detected across the skill's instructions or modules.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 05:09 PM