Trust Score for Zero Slop
Trust Score 89 out of 100. Security label: safe. Computed with methodology version 2026-10-21. A scan is not a safety guarantee.
Component scores
| Component | Score | Weight | Points |
|---|---|---|---|
| Security | 95 | 40% | 38.0 |
| Provenance | 70 | 20% | 14.0 |
| Installability | 100 | 15% | 15.0 |
| MCP posture | 95 | 10% | 9.5 |
| Publisher | 75 | 10% | 7.5 |
| Maintenance | 100 | 5% | 5.0 |
How the total is reached
- Weighted sum of the components: 89.0.
- No cap applies.
- No adjustments apply.
- Result: 89.
Security scan
- Scanner: static fallback scan, not a live exploit test.
- Listing last updated 2026-10-15 (7 days ago).
- Findings: 4, of which 0 high or critical.
- Security checks in the source CI: maintained, checked 2026-10-15.
| Severity | Finding | Path |
|---|---|---|
| low | MCP server zero-slop does not declare an auth posture. | .registry/mcp.json |
| info | Script permission declarations are required for scripts/: scripts/build_bundle.py, scripts/build_skill_zip.py, scripts/calibrate.py, scripts/build_onepager_pdf.py, scripts/check_distribution_manifests.py, scripts/build_plugin.py, scripts/build_marketplace_package.py, scripts/check_release_surfaces.py, scripts/contextual.py, scripts/make-readme-gif.mjs, scripts/learn.py, scripts/check_svg.py, scripts/check_release_version.py, scripts/predictability.py, scripts/reader_review.py, scripts/mcp_local_tools.py, scripts/mcp_workflow_tools.py, scripts/mcp_stdio.py, scripts/register.py, scripts/rerank.py, scripts/rescue.py, scripts/slopscore.py, scripts/safeio.py, scripts/version_check.py | |
| info | Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-kfu9Mo (lenient mode requires at least one markdown file) | distribution/plugins/zero-slop/skills/zero-slop |
| info | Cisco skill scanner exited with code 1: Error loading skill: No SKILL.md and no .md files found in /tmp/hol-skill-safety-mopRk6 (lenient mode requires at least one markdown file) | skills/zero-slop |
Ownership and provenance evidence
- Source commit pinned: Yes
- Manifest digest verified: Yes
- Domain proof: No
- Publisher verified: No
- Owner verified on HOL: Yes, since 2026-08-31
GitHub activity
- Stars: 133
- Forks: 5
- Open issues: 5
- Last push: 2026-10-06
Fetched 2026-10-14. GitHub activity is context only and is not part of the Trust Score.
Limitations
The scan reads source files and manifests; it does not run the plugin. Score history is not published yet, so this page shows the current score only. Memberships, paid placements and upvotes are not inputs. See the full methodology for every rule, or go back to Zero Slop.