
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
unslop-preflight
Advanced tools
Autopilot design quality gates and source-level UI slop detectors for AI-assisted frontend work before implementation handoff.
The ultimate preflight & autonomous repair guardrail for AI-built frontends.
Stop AI coding agents before they ship fragile, slop-ridden frontend layouts into production.
AI coding agents write frontend code 10x faster, but they also introduce fragile UI regressions 10x faster. When agents "vibe code" without strict guardrails, they often generate:
<div> elements: Interactive components missing keyboard support and ARIA landmarks.z-9999 patches: Stacking-context bugs masked by extreme z-indexes.transition: all declarations that degrade Interaction to Next Paint (INP).Unslop Preflight is an automated quality gate and source-level repair engine. It enforces accessibility, layout sanity, and copy standards before AI-generated code is ever merged.
Unslop Preflight unifies 7 open-source quality engines into one deterministic CLI:
no-ai-slop: Copy and prose refactoring.loop-engineering: Continuous L1/L2 autonomous loops.ui-review-loop: Visual browser UI testing and DOM timeline capture.browser-use: Headless automation and viewport boundary testing.make-interfaces-feel-better: 19 design engineering polish principles.ui-skills: Baseline motion performance and interaction rules.ux-ui-agent-skills: Design token governance and taste calibration.[!NOTE]
bunis highly recommended for executing Unslop Preflight within AI agent environments.
Run the instant preflight scan and auto-repair:
bunx unslop-preflight autopilot --safe-fix --verify
# Using Bun (Recommended)
bun add -d unslop-preflight
# Using npm
npm install --save-dev unslop-preflight
# Using pnpm
pnpm add -D unslop-preflight
| Command | Description | Example |
|---|---|---|
autopilot | Full preflight, source scan, repair, and verification. | bunx unslop-preflight autopilot --safe-fix --verify |
scan | Scans source code, prose, interface feel, and a11y. | bunx unslop-preflight scan src --strict |
loop | Continuous engineering loop runner (PR triage, CI sweep). | bunx unslop-preflight loop status |
review | Browser UI review recorder (DOM, HAR, network). | bunx unslop-preflight review start --url http://localhost:3000 |
init | Bootstraps PRODUCT.md, DESIGN.md, and AGENTS.md. | bunx unslop-preflight init |
repair | Executes safe, non-destructive AST transformations. | bunx unslop-preflight repair --safe-fix |
doctor | Checks environment health and lockfile configuration. | bunx unslop-preflight doctor |
[!IMPORTANT] Unslop Preflight is built with a zero-trust, secure-by-default architecture to prevent supply chain attacks, strictly adhering to npm security best practices.
ignore-scripts=true.package-lock.json, bun.lockb, pnpm-lock.yaml) during the repair lifecycle to prevent injection.--provenance).[!TIP] Paste this into Claude Code, Cursor, or Gemini CLI to delegate the cleanup loop.
You are my cleanup agent. Please run Unslop Preflight and fix the reported issues:
1. Detect the package manager (prefer Bun).
2. Run: `bunx unslop-preflight autopilot --safe-fix --verify --report --strict`
3. Read the reports in `.unslop/` (report.md, fix-list.md).
4. Address the findings:
- Fix prose slop and AI-sounding copy.
- Fix interface issues (transition: all, missing focus states).
- Fix accessibility gaps (clickable divs, icon-only buttons).
- Fix z-index and modal clipping bugs.
5. Re-run the autopilot command to verify the score delta.
6. Ensure all project checks (build, test, lint) pass cleanly.
unslop-preflight/
├── .github/workflows/ # CI/CD & OIDC trusted npm publishing
├── bin/cli.js # CLI executable entry point
├── src/
│ ├── commands/ # CLI handlers (autopilot, scan, loop, review)
│ ├── core/ # Engines (loopGate, reviewRecorder, safetyValidator)
│ ├── rules/ # Gate rules (proseSlop, interfaceFeel, a11y)
│ └── scanners/ # Analyzers (browserAutomation, sourceSlop)
├── tests/ # Unit & integration test runner suite
├── AGENTS.md # Agent guidance contract
├── SKILL.md # Universal skill manifest
└── package.json # Project description & ESM manifest
Crafted with care to bring rigorous architectural discipline and gorgeous visual elegance to AI-driven frontend workflows.
FAQs
Autopilot design quality gates and source-level UI slop detectors for AI-assisted frontend work before implementation handoff.
The npm package unslop-preflight receives a total of 55 weekly downloads. As such, unslop-preflight popularity was classified as not popular.
We found that unslop-preflight demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.