deslop
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses localized shell commands to identify which files to scan, specifically
git diff --cached --name-onlyandgit diff HEAD~1 --name-only. These operations are limited to the current repository's metadata and are standard for development tools. - [SAFE]: The skill follows a human-in-the-loop security model. It presents each proposed change individually and requires explicit user confirmation (
[y/n/skip-all-of-type]) before applying any modifications, preventing autonomous or unauthorized file changes. - [SAFE]: The scope of the skill is restricted to code files only. It explicitly instructions the agent to skip markdown, documentation, and configuration files, reducing the risk of unintended modifications to project metadata or legal headers.
- [SAFE]: All detection patterns are stored locally in the
references/slop-patterns.mdfile and focus on technical code verbosity (e.g., redundant comments, docstrings). There are no network capabilities or external dependencies involved in the scanning or cleaning process.
Audit Metadata