deslop — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited deslop (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
/deslop # full codebase
/deslop src/api # directory
/deslop 1234 # PR number (gh)
/deslop feat/new-auth # branch (diff vs default branch)#N → gh pr view N --json files → changed filesgit diff --name-only <default>...<branch>.gitignore and .git/info/excludedist/, build/, out/, .next/, target/, __pycache__/node_modules/, vendor/, .venv/, *.generated.*, *.gen.go, *_pb2.py, __snapshots__/, *.snapgit log --since='3 months' --name-only --pretty=format:), or by largest N files. Agents blow their context on huge scopes — don't push through.package.json, tsconfig*.json, pyproject.toml, go.mod, Cargo.toml. Note installed tools (knip, ts-prune, ruff, vulture, staticcheck, clippy). For polyglot repos, bucket files by language; each language gets its own set of 7 agents.Agent calls, subagent_type: "general-purpose". Each agent's prompt is its section of AGENTS.md with {scope}, {excludes}, {tools} filled in, plus the shared output format. This pass is analysis-only — no file edits, so parallel agents can't conflict. Print [N/7 done: <category>] as each agent returns.deslop-report.md at the repo root.deslop-report.md for the full list. Ask which categories or files to apply.deslop/<yyyy-mm-dd> off the current branch. Refuse to edit on main/master.Agent with isolation: "worktree" and that category's findings. Each worktree edits independently — no conflicts.deslop/<date> branch holds one commit per applied category and deslop-report.md records every finding as applied, deferred, or quarantined.Per-agent prompts: AGENTS.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.