slop-check
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, such as user-pasted text and local image files, and passes them to a local analysis tool. This creates a surface for indirect prompt injection where malicious instructions embedded in the analyzed data could theoretically attempt to influence the agent's subsequent actions.
- Ingestion points: User-provided text and file paths read via the
Readtool inSKILL.mdStep 1. - Boundary markers: The skill specifies structured markdown blocks for outputting verdicts and cleaned text in
SKILL.mdStep 4. - Capability inventory: The skill uses the
Bashtool to execute theslopCLI binary for all analysis operations. - Sanitization: The skill includes a dedicated
cleanupoperation designed to remove zero-width characters and homoglyphs from text. - [COMMAND_EXECUTION]: The skill invokes a local command-line interface located at
/Applications/Slop Or Not.app/Contents/MacOS/slopusing theBashtool. This is the intended mechanism for performing on-device AI detection and readability scoring without uploading data to the cloud.
Audit Metadata