Security risk report for @forgecat/anti-slop v0.1.0
Source Integrity
Low
Profile is a documented conversion of upstream open-source project (miqdadbadjuber/anti-slop) with pinned commit hash and MIT license.
All external references (GitHub URLs, images) point to the original repository at a specific commit; no typosquatted or attacker-controlled dependencies introduced.
Agent Intent
Low
Content describes design and code quality rules; no instructions to manipulate the AI, read credentials, exfiltrate data, or hide instructions.
Skills teach the agent to filter generic AI patterns in UI/copy/accessibility/layout/comments—a quality-improvement goal, not a malicious one.
No guidance poisoning: recommendations are for legitimate practices (WCAG contrast standards, keyboard accessibility, honest copywriting) with no security-weakening directives or backdoored templates.
Details
Evidence
'Anti Slop: Rules for AI Coding Agents. The core filter. Load always to stop generic AI slop.'
'Never invent facts' (R-17, R-36, R-38) and 'Do not over-sterilize' (R-37) are integrity guardrails, not attack vectors.
Contrast checker uses standard WCAG 2.x formula; no hidden instructions in tool descriptions.
Permissions
Low
Skills declare minimal, task-appropriate tools: Read, Write, Edit, Glob, Grep for text/code review; Bash(python3 *) only for the contrast-check.py utility in antislop-human.
No shell execution, file deletion, or network access requested; no alwaysApply=true rules with broad globs.
Authority matches stated function: editing UI, copy, code comments, and running a local contrast checker.
Details
Evidence
antislop-human allowed-tools: 'Bash(python *) Bash(python3 *) Read Write Edit Glob Grep' — scoped to Python runtime for contrast utility.
All other skills: 'Read Write Edit Glob Grep' — text and file inspection only.
MCP server 'antislop-contrast' runs a local Node launcher; no network or filesystem access declared beyond the script.
MCP Risk
Low
MCP server (antislop-contrast) is a local Node.js launcher for a contrast-checking utility; no network access, no arbitrary binary execution.
Tool description is transparent: 'The Python contrast checker remains beside antislop-human/SKILL.md. Its MCP server and Node launcher retain their original bytes and relative layout under a shared reference directory.'
No hidden instructions in tool definitions; the server is a known-safe utility for WCAG contrast computation.
ForgeCat