Skills install-anti-slop
📦

install-anti-slop

Content revision r1 Medium Risk ⚙️ External commands📁 Filesystem access

Install Anti-Slop Rules for Oxlint

Adding opinionated Oxlint rules manually requires copying plugin files and merging configuration safely. This skill performs the integration while preserving existing project settings.

Supports: Claude Codex Code(CC)
📊 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "install-anti-slop" from https://skillstore.io/skills/dmmulroy-install-anti-slop.md and its manifest at https://skillstore.io/api/skills/dmmulroy-install-anti-slop/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/dmmulroy-install-anti-slop.md Signed manifest GET /api/skills/dmmulroy-install-anti-slop/manifest Signed lockfile GET /api/skills/dmmulroy-install-anti-slop/lockfile

Test it

Using "install-anti-slop". Install anti-slop in this Oxlint project.

Expected outcome:

Copied the plugin into the project tooling directory, registered fifteen rules, added required development dependencies, and completed lint and type checks.

Using "install-anti-slop". Add anti-slop without fixing current application code.

Expected outcome:

  • Installed and configured the plugin without changing application source.
  • Reported existing rule violations for later review.
  • Preserved unrelated working tree changes.

Using "install-anti-slop". Migrate our older local anti-slop rules.

Expected outcome:

Compared the existing rules with the bundled version, preserved project-specific behavior separately, updated configuration, and documented remaining differences.

Security Audit

Medium Risk
v2 • 8/15/2026 Open versioned report

All 49 static findings are false positives caused by TypeScript imports, template literals, AST property names, or Markdown formatting. Semantic review found two medium risks: unchecked installer destinations and installation of unpinned current dependency versions.

21
Files scanned
2,354
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

Medium
scripts/install.mjs:8-19
Installer Allows Destinations Outside the Repository
The installer resolves an unchecked destination argument against the current directory. Absolute paths or parent traversal can target files outside the repository, and --force permits overwrites.
The argument reaches path.resolve without a containment check before mkdirSync and cpSync. The code directly confirms the out-of-repository write behavior.
Medium
SKILL.md:27-31
Installation Uses Unpinned Current Dependency Versions
The procedure tells agents to discover and install current package versions. Results can change between runs and expose users immediately to a compromised upstream release.
The instructions explicitly query current versions and install them. The named packages are legitimate, but the workflow lacks a reviewed version pin or integrity check.

Risk Factors

⚙️ External commands (36)
assets/anti-slop/rules/no-known-value-widening.ts:143 assets/anti-slop/rules/no-known-value-widening.ts:181 assets/anti-slop/rules/no-known-value-widening.ts:189 assets/anti-slop/rules/no-known-value-widening.ts:197 assets/anti-slop/rules/no-known-value-widening.ts:209 assets/anti-slop/rules/no-known-value-widening.ts:218 assets/anti-slop/rules/no-known-value-widening.ts:226 assets/anti-slop/rules/no-object-parameters.ts:46 assets/anti-slop/rules/no-reflect-apply.ts:15 assets/anti-slop/rules/no-reflect-get.ts:15 assets/anti-slop/rules/no-runtime-typeof.ts:36 assets/anti-slop/rules/no-unknown-parameters.ts:48 assets/anti-slop/rules/no-unknown-parameters.ts:52 assets/anti-slop/rules/no-unknown-returns.ts:36 assets/anti-slop/rules/no-unknown-type-aliases.ts:25 assets/anti-slop/rules/require-safety-comment-for-type-assertion.ts:48 scripts/install.mjs:14 scripts/install.mjs:20 scripts/install.mjs:21 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:21-23 SKILL.md:23-25 SKILL.md:25 SKILL.md:28 SKILL.md:30 SKILL.md:33 SKILL.md:35-53 SKILL.md:53-57 SKILL.md:57 SKILL.md:59-61 SKILL.md:61-79 SKILL.md:79-81 SKILL.md:81-91 SKILL.md:91
📁 Filesystem access (6)
assets/anti-slop/rules/no-known-value-widening.ts:9 assets/anti-slop/rules/no-object-parameters.ts:5 assets/anti-slop/rules/no-reflect-apply.ts:3 assets/anti-slop/rules/no-reflect-get.ts:3 assets/anti-slop/rules/no-unknown-returns.ts:5 assets/anti-slop/rules/no-unsafe-dictionary-type.ts:8
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/dmmulroy-install-anti-slop/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/dmmulroy-install-anti-slop/security.svg)](https://skillstore.io/skills/dmmulroy-install-anti-slop?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/dmmulroy-install-anti-slop?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dmmulroy-install-anti-slop/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/dmmulroy-install-anti-slop.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

dmmulroy. (2026). install-anti-slop security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dmmulroy-install-anti-slop/audits/2

BibTeX citation

@techreport{dmmulroy-dmmulroy-install-anti-slop-2026, author = {dmmulroy}, title = {install-anti-slop security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/dmmulroy-install-anti-slop/audits/2}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "install-anti-slop security audit report (audit version 2)" version: "unspecified" type: report authors: - name: "dmmulroy" date-released: "2026-08-15" url: "https://skillstore.io/skills/dmmulroy-install-anti-slop/audits/2" identifiers: - type: other value: "skillstore:dmmulroy-install-anti-slop:audit:2" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
59
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Add Strict Linting

Install the complete anti-slop rule set in a TypeScript service while preserving its current Oxlint settings.

Standardize Repository Checks

Apply consistent type-safety and code-quality rules across a maintained JavaScript or TypeScript repository.

Migrate a Local Plugin

Compare an older local anti-slop copy, replace it carefully, and retain project-specific rules separately.

Try These Prompts

Basic Installation 
Install the anti-slop Oxlint plugin in this repository. Preserve existing configuration and report every changed file.
Install and Verify 
Add anti-slop using this repository's package manager. Run lint and type checks, then summarize unresolved findings.
Integrate with Vite+ 
Integrate anti-slop with this Vite+ repository. Merge lint and format ignores, register the plugin, and run the full check.
Migrate Existing Rules 
Review the existing local anti-slop plugin before migration. Compare rules and diagnostics, preserve custom behavior, and explain every compatibility decision.

Best Practices

  • Review the working tree and existing lint configuration before installation.
  • Inspect dependency versions and the final diff before accepting changes.
  • Address new findings through clearer types and boundary parsing instead of weakening rule severity.

Avoid

  • Do not overwrite an existing plugin copy before comparing its rules and diagnostics.
  • Do not replace existing ignore patterns or unrelated dependency ranges.
  • Do not suppress findings with unsafe casts or mechanical type changes.

Frequently Asked Questions

Which projects can use this skill?
It targets local TypeScript or JavaScript repositories that use Oxlint or Vite+ lint configuration.
Which rules are installed?
The bundled plugin provides fifteen opinionated rules covering assertions, unknown types, reflection, dictionary types, mocking, and related patterns.
Will it overwrite an existing plugin?
The installer refuses an existing destination by default. Forced replacement should occur only after backup and review.
Does it fix every new lint finding?
No. It reports findings and changes application code only when the user explicitly requests migration or cleanup.
How are dependency versions selected?
The procedure queries current Oxlint and plugin versions, then installs matching versions with the repository package manager.
What checks run after installation?
It runs the repository lint command and type check. Vite+ projects use the full project check.

Developer Details

Author

dmmulroy

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/dmmulroy/anti-slop/tree/446268e5d15baa968eaec669ff65358d36ae6259/skills/install-anti-slop

Ref

ba0224440a0286a68c9ef7d65e409a580b885eba

Maintenance freshness

8/16/2026

Usage

0 downloads · 0 views

File structure

📁 assets/

📁 anti-slop/

📄 index.ts

📁 rules/

📄 no-chained-type-assertions.ts

📄 no-conditional-empty-object-spread.ts

📄 no-known-value-widening.ts

📄 no-module-mocking.ts

📄 no-object-parameters.ts

📄 no-reflect-apply.ts

📄 no-reflect-get.ts

📄 no-runtime-typeof.ts

📄 no-shape-in-symbol-names.ts

📄 no-unknown-parameters.ts

📄 no-unknown-returns.ts

📄 no-unknown-type-aliases.ts

📄 no-unsafe-dictionary-type.ts

📄 no-widen-then-assert.ts

📄 require-safety-comment-for-type-assertion.ts

📁 shared/

📄 dictionary-types.ts

📄 lexical-type-parameters.ts

📄 reflect-method.ts

📁 scripts/

📄 install.mjs

📄 SKILL.md