anti-slop
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script "scripts/story.mjs" uses "ffmpeg" via "child_process.execFileSync" to combine rendered frames into a video. It also utilizes Playwright to automate a browser for rendering.
- [EXTERNAL_DOWNLOADS]: The "snapshot.mjs" script (vendored from unslop) fetches external resources from user-provided URLs using the browser's "fetch" API to create localized versions of web pages. It also loads common libraries like GSAP and Lenis from the jsDelivr CDN, and fonts from Google Fonts and Fontshare.
- [DYNAMIC_EXECUTION]: The "scripts/hook-check.mjs" script uses dynamic "import()" to load an optional typography check from a relative path ("../../french-typography/scripts/fr-typo.mjs").
- [DYNAMIC_EXECUTION]: The "scripts/story.mjs" script injects function source code from "story-contrast.mjs" into a browser context using Playwright's "addScriptTag" to enable live contrast measurements.
Audit Metadata