deslop
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to perform repository analysis and file processing.
- Evidence: Invokes
node ../../scripts/detect.jsto run the core detection engine. - Evidence: Uses a shell pipeline involving
git symbolic-ref,git diff, andxargsto identify and analyze modified files in the current branch. - [REMOTE_CODE_EXECUTION]: The skill dynamically loads and executes code from the parent directory tree of the plugin.
- Evidence: Uses
require('../../lib/repo-map')to load external library components for AST-based analysis. - Evidence: Executes an external JavaScript logic file (
detect.js) located at a relative path outside the skill's own directory.
Audit Metadata