Habilidades install-anti-slop
📦

install-anti-slop

Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos📁 Acceso al sistema de archivos

Install Anti-Slop Rules for Oxlint

Adding opinionated Oxlint rules manually requires copying plugin files and merging configuration safely. This skill performs the integration while preserving existing project settings.

Compatible con: Claude Codex Code(CC)
📊 69 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "install-anti-slop" from https://skillstore.io/skills/dmmulroy-install-anti-slop.md and its manifest at https://skillstore.io/api/skills/dmmulroy-install-anti-slop/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/dmmulroy-install-anti-slop.md Manifest firmado GET /api/skills/dmmulroy-install-anti-slop/manifest Lockfile firmado GET /api/skills/dmmulroy-install-anti-slop/lockfile

Pruébalo

Usando "install-anti-slop". Install anti-slop in this Oxlint project.

Resultado esperado:

Copied the plugin into the project tooling directory, registered fifteen rules, added required development dependencies, and completed lint and type checks.

Usando "install-anti-slop". Add anti-slop without fixing current application code.

Resultado esperado:

  • Installed and configured the plugin without changing application source.
  • Reported existing rule violations for later review.
  • Preserved unrelated working tree changes.

Usando "install-anti-slop". Migrate our older local anti-slop rules.

Resultado esperado:

Compared the existing rules with the bundled version, preserved project-specific behavior separately, updated configuration, and documented remaining differences.

Auditoría de seguridad

Riesgo medio
v2 • 15/8/2026 Abrir el informe versionado

All 49 static findings are false positives caused by TypeScript imports, template literals, AST property names, or Markdown formatting. Semantic review found two medium risks: unchecked installer destinations and installation of unpinned current dependency versions.

21
Archivos escaneados
2,354
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (2)

Medio
scripts/install.mjs:8-19
Installer Allows Destinations Outside the Repository
The installer resolves an unchecked destination argument against the current directory. Absolute paths or parent traversal can target files outside the repository, and --force permits overwrites.
The argument reaches path.resolve without a containment check before mkdirSync and cpSync. The code directly confirms the out-of-repository write behavior.
Medio
SKILL.md:27-31
Installation Uses Unpinned Current Dependency Versions
The procedure tells agents to discover and install current package versions. Results can change between runs and expose users immediately to a compromised upstream release.
The instructions explicitly query current versions and install them. The named packages are legitimate, but the workflow lacks a reviewed version pin or integrity check.

Factores de riesgo

⚙️ Comandos externos (36)
assets/anti-slop/rules/no-known-value-widening.ts:143 assets/anti-slop/rules/no-known-value-widening.ts:181 assets/anti-slop/rules/no-known-value-widening.ts:189 assets/anti-slop/rules/no-known-value-widening.ts:197 assets/anti-slop/rules/no-known-value-widening.ts:209 assets/anti-slop/rules/no-known-value-widening.ts:218 assets/anti-slop/rules/no-known-value-widening.ts:226 assets/anti-slop/rules/no-object-parameters.ts:46 assets/anti-slop/rules/no-reflect-apply.ts:15 assets/anti-slop/rules/no-reflect-get.ts:15 assets/anti-slop/rules/no-runtime-typeof.ts:36 assets/anti-slop/rules/no-unknown-parameters.ts:48 assets/anti-slop/rules/no-unknown-parameters.ts:52 assets/anti-slop/rules/no-unknown-returns.ts:36 assets/anti-slop/rules/no-unknown-type-aliases.ts:25 assets/anti-slop/rules/require-safety-comment-for-type-assertion.ts:48 scripts/install.mjs:14 scripts/install.mjs:20 scripts/install.mjs:21 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:21-23 SKILL.md:23-25 SKILL.md:25 SKILL.md:28 SKILL.md:30 SKILL.md:33 SKILL.md:35-53 SKILL.md:53-57 SKILL.md:57 SKILL.md:59-61 SKILL.md:61-79 SKILL.md:79-81 SKILL.md:81-91 SKILL.md:91
📁 Acceso al sistema de archivos (6)
assets/anti-slop/rules/no-known-value-widening.ts:9 assets/anti-slop/rules/no-object-parameters.ts:5 assets/anti-slop/rules/no-reflect-apply.ts:3 assets/anti-slop/rules/no-reflect-get.ts:3 assets/anti-slop/rules/no-unknown-returns.ts:5 assets/anti-slop/rules/no-unsafe-dictionary-type.ts:8
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/dmmulroy-install-anti-slop/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/dmmulroy-install-anti-slop/security.svg)](https://skillstore.io/skills/dmmulroy-install-anti-slop?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/dmmulroy-install-anti-slop?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dmmulroy-install-anti-slop/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/dmmulroy-install-anti-slop.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

dmmulroy. (2026). install-anti-slop security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dmmulroy-install-anti-slop/audits/2

Cita BibTeX

@techreport{dmmulroy-dmmulroy-install-anti-slop-2026, author = {dmmulroy}, title = {install-anti-slop security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/dmmulroy-install-anti-slop/audits/2}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "install-anti-slop security audit report (audit version 2)" version: "unspecified" type: report authors: - name: "dmmulroy" date-released: "2026-08-15" url: "https://skillstore.io/skills/dmmulroy-install-anti-slop/audits/2" identifiers: - type: other value: "skillstore:dmmulroy-install-anti-slop:audit:2" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
59
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación

Lo que puedes crear

Add Strict Linting

Install the complete anti-slop rule set in a TypeScript service while preserving its current Oxlint settings.

Standardize Repository Checks

Apply consistent type-safety and code-quality rules across a maintained JavaScript or TypeScript repository.

Migrate a Local Plugin

Compare an older local anti-slop copy, replace it carefully, and retain project-specific rules separately.

Prueba estos prompts

Basic Installation 
Install the anti-slop Oxlint plugin in this repository. Preserve existing configuration and report every changed file.
Install and Verify 
Add anti-slop using this repository's package manager. Run lint and type checks, then summarize unresolved findings.
Integrate with Vite+ 
Integrate anti-slop with this Vite+ repository. Merge lint and format ignores, register the plugin, and run the full check.
Migrate Existing Rules 
Review the existing local anti-slop plugin before migration. Compare rules and diagnostics, preserve custom behavior, and explain every compatibility decision.

Mejores prácticas

  • Review the working tree and existing lint configuration before installation.
  • Inspect dependency versions and the final diff before accepting changes.
  • Address new findings through clearer types and boundary parsing instead of weakening rule severity.

Evitar

  • Do not overwrite an existing plugin copy before comparing its rules and diagnostics.
  • Do not replace existing ignore patterns or unrelated dependency ranges.
  • Do not suppress findings with unsafe casts or mechanical type changes.

Preguntas frecuentes

Which projects can use this skill?
It targets local TypeScript or JavaScript repositories that use Oxlint or Vite+ lint configuration.
Which rules are installed?
The bundled plugin provides fifteen opinionated rules covering assertions, unknown types, reflection, dictionary types, mocking, and related patterns.
Will it overwrite an existing plugin?
The installer refuses an existing destination by default. Forced replacement should occur only after backup and review.
Does it fix every new lint finding?
No. It reports findings and changes application code only when the user explicitly requests migration or cleanup.
How are dependency versions selected?
The procedure queries current Oxlint and plugin versions, then installs matching versions with the repository package manager.
What checks run after installation?
It runs the repository lint command and type check. Vite+ projects use the full project check.

Detalles del desarrollador

Autor

dmmulroy

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/dmmulroy/anti-slop/tree/446268e5d15baa968eaec669ff65358d36ae6259/skills/install-anti-slop

Ref.

ba0224440a0286a68c9ef7d65e409a580b885eba

Actualidad del mantenimiento

16/8/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📁 assets/

📁 anti-slop/

📄 index.ts

📁 rules/

📄 no-chained-type-assertions.ts

📄 no-conditional-empty-object-spread.ts

📄 no-known-value-widening.ts

📄 no-module-mocking.ts

📄 no-object-parameters.ts

📄 no-reflect-apply.ts

📄 no-reflect-get.ts

📄 no-runtime-typeof.ts

📄 no-shape-in-symbol-names.ts

📄 no-unknown-parameters.ts

📄 no-unknown-returns.ts

📄 no-unknown-type-aliases.ts

📄 no-unsafe-dictionary-type.ts

📄 no-widen-then-assert.ts

📄 require-safety-comment-for-type-assertion.ts

📁 shared/

📄 dictionary-types.ts

📄 lexical-type-parameters.ts

📄 reflect-method.ts

📁 scripts/

📄 install.mjs

📄 SKILL.md

Habilidades relacionadas

Ver todo