install-anti-slop
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes an installation script,
scripts/install.mjs, which the agent is instructed to run. This script uses standard Node.js file system modules (node:fs) to copy the bundled lint rules from the skill's directory into the target project's repository. This is a legitimate helper function for the skill's purpose. - [COMMAND_EXECUTION]: The skill instructs the agent to use the project's package manager to install
oxlintand@oxlint/plugins. These are established, well-known development tools for JavaScript linting, and their use is consistent with the skill's stated intent. - [SAFE]: The provided lint rules (located in
assets/anti-slop/rules/) are standard AST-based checks that run locally. They identify patterns such as chained type assertions, runtimetypeofchecks, and unsafe dictionary types, reporting them back to the user through the standard Oxlint interface. - [SAFE]: The analysis found no evidence of network activity, credential harvesting, persistence mechanisms, or attempts to obfuscate the skill's logic or instructions.
Audit Metadata