Borrowing it
Nothing to install: this file belongs to lootlog/monorepo. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/lootlog/monorepo/main/.agents/skills/deslop/SKILL.mdgit clone --depth 1 https://github.com/lootlog/monorepoWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lootlog/monorepo/deslop)<a href="https://agentmods.dev/skills/lootlog/monorepo/deslop"><img src="https://agentmods.dev/badge/skills/lootlog/monorepo/deslop/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lootlog/monorepo/deslop"><img src="https://agentmods.dev/badge/skills/lootlog/monorepo/deslop.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.00502 |
| Opus 5.5 | $0.00022 | $0.00201 |
| Sonnet 5.5 | $0.00011 | $0.00100 |
| Haiku 4.5 | $0.00006 | $0.00050 |
Grade A, and why
deslop scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 22d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 44 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Deslop
Clean only the current branch diff before review. Preserve behavior absolutely.
Checklist
- Scope the pass to the diff against the merge base with
origin/main(git diff $(git merge-base origin/main HEAD)), including uncommitted changes you own. Never run a repo-wide cleanup, and leave unrelated user changes in the working tree untouched. - Inspect every changed hunk for:
- comments a human maintainer would not write, including narration, syntax explanation, and prose that merely restates the code;
- defensive checks or
try/catchblocks that are abnormal for the surrounding module or protect only imagined states; - casts that launder types, especially
as anyand assertions whose required safety comment restates the cast instead of naming the guarantee. Oxlint'santi-slop/no-chained-type-assertionsandanti-slop/no-widen-then-assertalready rejectas unknown as Tand widen-then-assert flows; - redundant intermediate variables or one-use helpers that do not add domain meaning, reduce duplication, or simplify control flow;
memo,useMemo, oruseCallbackwithout a measured integration constraint, since React Compiler owns memoization;- source files that only re-export symbols;
- compatibility shims, aliases, retries, and fallback branches without a named shipped contract and removal plan;
- naming, control flow, imports, formatting, and other style that conflicts with the surrounding file.
- Make no functional edits. If cleanup could change behavior, leave it alone and report it instead.
- Fix a finding inline only when the cleanup is trivial and behavior-neutral. Otherwise note it for the author.
- After edits, run lint and typecheck for every touched workspace.
- Report the result in 1–3 sentences, including whether anything changed and any non-trivial item left for review.
Run deslop before the correctness review, never instead of it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 22d ago First seen · 44 lines · 56 tokens per session scan A 907d98886406
deslop is a skill published in the GitHub repository lootlog/monorepo (29 stars, last pushed yesterday), licensed MIT. It adds 56 tokens to every session and 502 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-29.
Other skills, from other repositories
recipe-front-review
Reviews completed frontend implementation for governing-source compliance, scope economy, repository quality, and security, then applies user-approved React corrections.
codebase-review
Review an entire codebase for architecture, engineering health, and exploitable risk; generate a prioritized remediation plan, an evidence-anchored system knowledge document, or both.
review-system-design
Review a system design someone else provided - screenshot, drawio, Mermaid, slides, doc, or IaC - by extracting it into a confirmed fact sheet, then scoring it on the nine axes.
review-ticket
Review a ticket or PR through focused specialist lenses: scope, architecture, security, tests, AC coverage, and PR metadata.
common-feedback-reporter
Pre-write audit for skill violations: checks planned code against loaded skill anti-patterns before any file write. Use when writing Flutter/Dart/TS code or editing SKILL.md files with active project skills. Load as composite; on auto-fixed violation, also load +common/common-learning-log.
isolating-product-facade-contracts
Plan and execute product isolation migrations to a facade plus contract layer in PostHog, following the Visual review architecture. Use when a product still exposes internals (models/logic/views) across boundaries and needs migration toward contracts.py + facade/api.py + presentation separation, with a PR strategy…