Skills/npm/stop-ai-slop

stop-ai-slop@2.1.2

CAUTION· install only

Publisher claims: "Zero-dependency linter that blocks AI-generated comment slop. Enforces a one-line, why-only comment policy via pre-commit hook, IDE plugin and CI." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher whitebite · publishing for 49 daysInstalls 985Last detonated 6d ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 78/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Latin word with Cyrillic or Greek look-alike letters (homoglyph); Access to sensitive file paths; Access to sensitive file paths. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Latin word with Cyrillic or Greek look-alike letters (homoglyph)README.ru.md:411 · Latin word with Cyrillic or Greek look-alike letters (homoglyph)входaFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Access to sensitive file pathsskill/scripts/selftest.mjs:173 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env": "# removeSource rewrites rows\n# with fresh uuids zones vanish\nX=1\n",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskill/scripts/src/profiles.mjs:107 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env": "hash",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packageskill/scripts/selftest/checks/golden.mjs:33 · npx invocation of non-well-known package — may execute untrusted code' "command": "npx stop-ai-slop --pre-tool"',Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskill/scripts/selftest/checks/golden.mjs:15 · npx invocation of non-well-known package — may execute untrusted code' "command": "npx stop-ai-slop --pre-tool",',Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionskill/scripts/selftest.mjs:262 · File type combined with upload action — agent may exfiltrate local data fileswriteFileSync(join(dir, "pgdump.sql"), "-- PostgreSQL database dump\n-- Dumped by pg_dump version 16\n-- narrative line one\n-- narrative line two\nSELECT 1;\n")Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskill/scripts/src/install.mjs:174 · npx invocation of non-well-known package — may execute untrusted codelines.push("", "## Проверка", "", "npx stop-ai-slop scan . — полный скан; npx stop-ai-slop --staged — только staged-строки.")Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskill/scripts/selftest/checks/vscode.mjs:132 · npx invocation of non-well-known package — may execute untrusted code? await new Promise((resolve) => ext.spawnScanner("npx stop-ai-slop", ["scan", "."], fixture, 20000, (err, stdout, stderr) => resolve({ err, stdout, stderr })))Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskill/scripts/selftest/checks/vscode.mjs:17 · npx invocation of non-well-known package — may execute untrusted codewriteFileSync(join(dir, "node_modules", "stop-ai-slop", "cli.js"), 'console.log("src/a.ts:12 changelog-marker [error] npx finding")\n')Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskill/scripts/src/install.mjs:156 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(`"hooks": ${JSON.stringify({ BeforeTool: [{ matcher: "write_file|replace", hooks: [{ type: "command", command: "npx stop-ai-slop --pre-tool", timeout: 60000 }] }] }, null, 2)}`)Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskill/scripts/selftest/checks/vscode.mjs:135 · npx invocation of non-well-known package — may execute untrusted code"vscode-ext-spawn: npx stop-ai-slop запускается без ENOENT (win32 .cmd-шим)",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskill/scripts/src/install.mjs:158 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(`"hooks": ${JSON.stringify({ PreToolUse: [{ matcher: "write_file|replace", hooks: [{ type: "command", command: "npx stop-ai-slop --pre-tool" }] }] }, null, 2)}`)Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈4,828 tok
2 files · 80 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

No advisories in OSV for stop-ai-slop@2.1.2 as of 6d ago. This is the package itself, not its dependencies.

What would make this Verified

2 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim whitebite: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Hidden instructions≈ +6 on the totalRemove HTML comments, zero-width characters and white-on-white text that carry instructions. Everything the agent is meant to read should be visible to the person reading the file.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
  5. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
Publish a new version to npm, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim whitebitePropose a patch to the maintainer