aislop
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill executes the aislop CLI, which can be run via npx. This involves executing code fetched from the npm registry. The skill includes a dedicated section on supply-chain policy that encourages using pinned local dependencies.
- [EXTERNAL_DOWNLOADS]: The skill references and downloads the aislop package from the public npm registry and refers to the vendor's GitHub repositories and homepage.
- [COMMAND_EXECUTION]: The skill's core functionality relies on executing CLI commands like scan and fix to perform static analysis and automated code modifications.
- [PERSISTENCE]: The skill can install development hooks into the project's environment to automate quality checks during the coding lifecycle.
- [DYNAMIC_EXECUTION]: The skill supports launching other AI agent processes to handle non-mechanical code fixes using the fix command with agent-specific flags.
Audit Metadata