slop-detector
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses local tools (Read, Grep, TodoWrite) to perform text analysis on markdown files. It does not initiate external network connections or download untrusted code.
- [SAFE]: Configuration discovery follows standard security practices by walking up the directory tree to find
.slop-config.yamlwithin the project root. - [SAFE]: Command execution is limited to benign local utilities like
grepandwcfor the purpose of counting word frequencies and punctuation marks. - [SAFE]: History tracking and metrics storage are performed locally in a designated
.slop-historydirectory, following standard logging patterns. - [SAFE]: No obfuscation, hardcoded credentials, or privilege escalation patterns were detected across the skill's instructions or modules.
Audit Metadata