FixMySlop

The slop linter for the AI-agent era. FixMySlop catches the things AI coding agents get wrong — the purple-gradient landing page, the // ... existing code ... that silently deleted half a file, the npm package that doesn't exist, the OpenAI key in NEXT_PUBLIC_ — in milliseconds, without an LLM. Then it hands a precise fix list to the agent you already use (Claude Code, Codex, Cursor, Gemini) and re-scans to prove it's fixed.

Why this exists when you already have a frontier model

Frontier models are great at fixing slop and bad at noticing their own. They write the purple gradient because it's the statistical default; they elide code when an edit gets long; they import packages that sound right. FixMySlop is the other half of the loop:

So: FixMySlop finds, your agent fixes, FixMySlop verifies. The old "local LLM reviews your code" mode still exists (--llm), but it's optional — the rules engine is the product.

Install

pipx install fixmyslop            # or: pip install fixmyslop
npx fixmyslop scan                # JavaScript projects: no install step (runs via uvx/pipx)

npx needs Python 3.10+ plus uv or pipx on the machine; it always runs the FixMySlop version that matches the npm package.

Optional: pip install "fixmyslop[analysis]" adds Ruff + Bandit findings for Python, "fixmyslop[gui]" adds the desktop app.

30 seconds

fixmyslop scan                    # whole repo
fixmyslop scan --changed          # only what changed vs main (+ uncommitted)
fixmyslop scan --open             # interactive HTML report with copy-to-agent fix prompts
fixmyslop fix --safe-only         # behavior-preserving auto-fixes
fixmyslop fix                     # safe fixes → hand the rest to your agent → re-scan
fixmyslop init --claude           # make Claude Code check its own work, live

Try it on the bundled demo: fixmyslop scan examples/slop-app --open.

What it catches

UI slop — the visual and copy tells of generated frontends (React, Vue, Svelte, Astro, HTML, CSS, Tailwind)

Accessibility — a11y/img-alt, a11y/clickable-div, a11y/icon-button, a11y/focus-removed, a11y/dead-link

Code slop — slop/elided-code (// ... existing code ...), slop/placeholder-impl ("in a real app you would…"), slop/stub-function, slop/swallowed-exception, slop/empty-catch, slop/bare-except, slop/narrating-comment, slop/step-comments, slop/debugger, slop/console-log, slop/emoji-log, slop/ts-any, slop/ts-ignore, slop/blanket-suppression, slop/placeholder-credential, slop/ai-voice

Dependencies — deps/phantom-import: imports that aren't stdlib, local, declared, or installed (hallucinated packages are what slopsquatting attacks register). --online confirms against PyPI / npm. deps/undeclared-import: works on your machine, breaks in CI.

Security — sec/leaked-key (OpenAI/Anthropic/AWS/GitHub/Stripe/Google key formats, private keys — always redacted in output), sec/public-env-secret (NEXT_PUBLIC_*SECRET*, VITE_*OPENAI*), sec/hardcoded-credential, sec/sql-injection, sec/cors-wildcard, sec/tls-disabled, sec/raw-html, sec/eval

Plus Ruff, Bandit and Semgrep findings when installed. fixmyslop rules lists everything; fixmyslop rules ui/ai-gradient explains one.

Use it with your agent

Claude Code

fixmyslop init --claude

This installs four things, all idempotent:

• a skill (.claude/skills/fixmyslop/SKILL.md) so Claude reaches for FixMySlop on its own when it builds UI or finishes a task
• an MCP server in .mcp.json with check_slop, fix_safe, explain_rule, slop_guide tools
• a PostToolUse hook — every file Claude writes is checked instantly; only the lines it just wrote are reported, and Claude is told to fix them before moving on
• anti-slop rules in CLAUDE.md

fixmyslop init --user installs the skill for every project on your machine.

Cursor, Codex, Gemini, Windsurf, anything with MCP

fixmyslop init --cursor          # .cursor/rules + .cursor/mcp.json
fixmyslop init --agents          # AGENTS.md (Codex, Gemini, Jules, Copilot agents)
claude mcp add fixmyslop -- fixmyslop mcp     # or register the MCP server anywhere

MCP config for JSON-configured clients (Cursor, Windsurf, Claude Desktop):

{ "mcpServers": { "fixmyslop": { "command": "npx", "args": ["-y", "fixmyslop", "mcp"] } } }

Hand off a fix

fixmyslop fix                          # auto-detects claude / codex / gemini on PATH
fixmyslop fix --agent claude --yes
fixmyslop fix --agent-cmd "aider --message-file {brief} --yes"
fixmyslop fix --agent llm -b https://openrouter.ai/api/v1 -m <model>   # any OpenAI-compatible API, incl. Ollama
fixmyslop scan -f prompt > brief.md    # or paste the brief yourself

fix applies safe deterministic fixes first, writes a brief to .fixmyslop/brief.md (file-by-file checklist with a concrete fix for every rule plus UI design direction), runs the agent, re-scans, and repeats for up to --rounds. It ends with the before/after score.

CI

# .github/workflows/fixmyslop.yml   (or: fixmyslop init --github)
on: [pull_request]
permissions: { contents: read, security-events: write }
jobs:
  slop:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with: { fetch-depth: 0 }
      - uses: MrSpideyNihal/FixMySlop@main
        with: { fail-on: high, changed-only: true }

Findings show up as inline PR annotations (SARIF). pre-commit:

repos:
  - repo: https://github.com/MrSpideyNihal/FixMySlop
    rev: v0.3.2
    hooks: [{ id: fixmyslop }]

Configure

.fixmyslop.yml (or [tool.fixmyslop] in pyproject.toml), created by fixmyslop init:

exclude: ["legacy/**", "**/*.generated.ts"]
disable: ["ui/default-font"]           # ids or groups: ui, a11y, slop, sec, deps
severity: {"slop/console-log": "INFO"}
fail_on: high
hook: { min_severity: MEDIUM }

Silence one finding with a reason: // fixmyslop-ignore[ui/gradient-text] brand guideline. Skip a file: fixmyslop-ignore-file in its first lines. Paths passed explicitly are always scanned.

Output formats

-f text (default) · compact (one line per issue, for agents) · prompt (fix brief) · sarif · json · markdown · html (interactive: filters, search, "copy fix prompt" per file) · csv · pdf. Save with -s report.html (format inferred from the extension). Exit codes: 0 clean, 1 issues at/above --fail-on, 2 usage error.

Slop score

0 (clean) to 100, from severity-weighted findings per 1,000 lines, so a 500-line app and a 500k-line monorepo are comparable. Grades: A < 10 ≤ B < 25 ≤ C < 45 ≤ D < 65 ≤ F. FixMySlop's own repo is scanned in CI and holds an A.

Optional: LLM review and the desktop app

fixmyslop scan --llm adds a model review pass over each file (Ollama, llama.cpp, vLLM, LM Studio, or any OpenAI-compatible endpoint via --base-url/--api-key/--model, or FIXMYSLOP_* env vars). It's slow and non-deterministic, so it's off by default.

fixmyslop gui (needs fixmyslop[gui]) opens the desktop app: scan, browse findings by file, export reports. For most people fixmyslop scan --open is the faster way to browse results.

Development

pip install -e ".[analysis,dev]"
pytest -q
fixmyslop scan . --fail-on medium     # the repo must stay clean
python screenshots/make_screenshots.py   # regenerate README screenshots

Adding a rule: write a check in fixmyslop/core/slop/rules_*.py with the @rule decorator (or line_rule for a regex), then add a sloppy + clean pair to tests/test_slop_rules.py. Every rule needs a why and an actionable fix — the fix text is what agents follow.

License

MIT