slopcheck

Validate npm package references in markdown, YAML, and config files against the live npm registry before installing or using them. Catches hallucinated and s...

This skill is essentially a README for a CLI that checks whether package names referenced in docs exist on npm; it's internally consistent and doesn't ask for secrets. Two practical cautions: (1) the SKILL.md demonstrates running `npx slopcheck` — running `npx` will fetch and execute code from the npm registry, so only run it if you trust or have inspected that package (prefer installing a vetted local copy or reviewing the GitHub source linked in the doc). (2) slopcheck intentionally does not scan package.json or lockfiles, so do not rely on it as your only supply-chain check. If you want fully automated enforcement inside agents, ask for a bundled implementation or explicit install instructions so you can audit the code before execution.

Type: OpenClaw Skill Name: slopcheck Version: 0.1.2 The slopcheck skill is a defensive utility designed to validate npm package names against the official registry to prevent the installation of hallucinated or 'slopsquatted' packages. The SKILL.md provides clear, legitimate instructions for scanning local files and does not contain any indicators of data exfiltration, prompt injection, or malicious intent.