by MrZoyo
Deletion-first Agent Skill for removing test bloat, verification theater, and speculative fallbacks while preserving behavior.
# Add to your Claude Code skills
git clone https://github.com/MrZoyo/deslop-GPTLast scanned: 9/2/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-09-02T08:29:58.064Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how deslop-GPT compares with popular alternatives.
deslop-GPT is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by MrZoyo. Deletion-first Agent Skill for removing test bloat, verification theater, and speculative fallbacks while preserving behavior. It has 126 GitHub stars.
Yes. deslop-GPT passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/MrZoyo/deslop-GPT" and add it to your Claude Code skills directory (see the Installation section above).
deslop-GPT is primarily written in Python. It is open-source under MrZoyo on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh deslop-GPT against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
deslop audits and, when explicitly authorized, removes complexity accumulated through repeated coding-agent implementation and correction cycles. Those cycles often leave overlapping regression tests, producer-verifies-producer checks, and fallback layers that hide failures instead of handling a current contract.
This is semantic subtraction, not source beautification. deslop is not a formatter, style humanizer, test-count minimizer, blanket ban on defensive code, or automatic permission to edit a repository. It follows justification chains to independent evidence and preserves behavior whose contract remains real or uncertain.
Reduce test surface, not behavior surface.
The percentages below are design priorities, not measured prevalence.
| Priority | Target | Question |
|---|---|---|
| ~50% | Test-suite bloat | Does each test protect a distinct failure domain with a current owner and an independent oracle? |
| ~25% | Verification theater | Can the verifier fail independently from the producer, or do both share the same information and failure domain? |
| ~25% | Defensive / fallback bloat | Does the recovery path implement a current contract, or merely mask an unexpected internal error? |
Generic dead code, wrappers, abstractions, and comments are secondary. They matter only when they belong to one of these clusters or have direct high-confidence deletion evidence.
| Remove | Preserve |
|---|---|
| Self-justifying or duplicate tests | Distinct success, rejection, error, and edge-case behavior |
| Checksums, receipts, or validators with no independent consumer | Persistence and corruption checks across a real failure boundary |
| Speculative or obsolete fallback chains | Supported compatibility and documented protocol behavior |
| Repeated defenses inside trusted call graphs | Real handling at external and untrusted boundaries |
| Wrapper/test clusters with no independent purpose | Security, transactions, concurrency, resource, and scientific invariants |
Resemblance to a smell is a lead, not a verdict. Security and trust boundaries, supported callers, persisted formats, and numerical constraints are preserved by default when evidence is incomplete.
Invoke the bundled installer with this GitHub Skill URL:
$skill-installer
Install the Skill from:
https://github.com/MrZoyo/deslop-GPT/tree/v0.3.2/skills/deslop
For a reviewable local checkout, symlink the runtime directory into Codex's canonical user Skill location:
git clone --branch v0.3.2 --depth 1 https://github.com/MrZoyo/deslop-GPT.git "$HOME/.local/share/deslop-GPT"
mkdir -p "$HOME/.agents/skills"
ln -s "$HOME/.local/share/deslop-GPT/skills/deslop" "$HOME/.agents/skills/deslop"
Codex supports symlinked Skill directories and detects changes automatically. The tagged v0.3.2 path is the current released, pinned standalone Skill; main is the development branch and may contain unreleased changes.
Inside Claude Code, add this repository as a marketplace and install the Plugin:
/plugin marketplace add MrZoyo/deslop-GPT
/plugin install deslop@deslop
The canonical Plugin command is /deslop:deslop. For a local checkout, load the repository directly with claude --plugin-dir . from the repository root. The marketplace catalog is read from main, but its Plugin source uses an explicit HTTPS Git URL pinned to the v0.3.2 tag and release commit 0cc15c036b07691c600bda1219b8cc5c197ca3f1. This patch release makes missing-evidence limits explicit in the closed-loop rule. The v0.3.1 evaluation evidence remains tied to its exact released payload.
The same released runtime payload can be linked into each host's user Skill directory:
mkdir -p "$HOME/.agents/skills" "$HOME/.claude/skills"
ln -s "$HOME/.local/share/deslop-GPT/skills/deslop" "$HOME/.agents/skills/deslop"
ln -s "$HOME/.local/share/deslop-GPT/skills/deslop" "$HOME/.claude/skills/deslop"
Use only the link for the host you need, and run each ln command only when its destination does not already exist. A standalone Claude Code installation invokes the Skill as /deslop. See Getting Started for installation scope, v0.1.0 migration, updates, removal, and a safer review-first workflow. deslop is an independent community project, not an OpenAI or Anthropic product.
The shared skills/deslop/ payload follows the open Agent Skills structure and is used unchanged by Codex and Claude Code. .claude-plugin/plugin.json and .claude-plugin/marketplace.json provide Claude Code packaging. Codex Plugin distribution remains withheld because the tested Codex host installed and cached a Skills-only Plugin without registering its bundled Skill; Codex standalone installation remains supported. See the distribution compatibility note.
| Host and distribution | Command name |
|---|---|
| Codex standalone Skill | $deslop |
| Claude Code standalone Skill | /deslop |
| Claude Code Plugin | /deslop:deslop |
Append the same mode and scope arguments to the command name for each host:
| Arguments | Effect |
|---|---|
| none | Read-only audit of the established scope |
audit |
Explicit read-only audit |
apply |
Apply reviewed cleanup within scope |
tests apply |
Prioritize test signal and mutual-support test/code clusters |
current branch apply |
Clean current work relative to its actual merge base |
deep |
Repository-wide read-only audit |
deep apply |
Repository-wide cleanup without redesign |
Only apply authorizes edits. Staging, commits, pushes, branch changes, resets, and fetching still require separate permission.
Start with evidence, not edits:
$deslop deep
HIGH
- two fallback layers handle the same internal parse failure;
current callers and history show no supported legacy input
- a local receipt is produced and verified by the same workflow;
no external consumer or persisted trust boundary exists
PRESERVE
- a persisted readback detects truncated output across a write/read boundary
- a compatibility branch is required by a documented external protocol
Review each evidence chain and preservation decision. Apply only the supported scope:
$deslop deep apply
The example is schematic; it does not represent a benchmark fixture or performance claim.
The full decision model is documented in Design. The self-contained runtime SKILL.md remains authoritative for agent behavior.
Codex enforces explicit invocation through allow_implicit_invocation: false. Claude Code does not read that OpenAI-specific metadata; the shared standards-compatible frontmatter instead tells Claude to invoke deslop explicitly. Claude Code may still select the Skill from its description — a 2026-09-03 control run recorded it doing exactly that — but such an invocation remains read-only unless the user includes apply. Default and audit modes are read-only, and suspicious constructs can be recorded as deliberate preservation decisions. Code is not removable merely because it looks defensive, was written by an a