Story Deslop

AdvisoryAudited by Static analysis on May 12, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run a simple local character-counting command if working with files or text buffers.

Why it was flagged

The skill suggests using the local `wc -m` command to count characters. This is command use, but it is limited, disclosed, and directly related to checking how much text was removed.

Skill content
删除比例上限:单次去AI味操作的删除量不得超过原文总字数的 15%(用 `wc -m` 统计修改前后字符数差值)
Recommendation

Users should ensure any command execution remains limited to harmless counting and does not operate on unintended files.

What this means

Words added to the whitelist may be skipped in later AI-style checks for that project.

Why it was flagged

The skill creates or uses a project-local whitelist file that can affect future banned-word checks. This is persistent context, but it is disclosed, user-customizable, and scoped to the project.

Skill content
如果 `.deslop-whitelist` 不存在,首次运行 Gate A 时创建空文件并提示用户可自定义。
Recommendation

Review the .deslop-whitelist file if results seem inconsistent, and avoid adding sensitive or unrelated content to it.