verify

The skill establishes a comprehensive quality assurance and security verification framework. It identifies project types (Node.js, Rust, Go, Python) and suggests corresponding standard tools: Phase 1 (Build) uses project-specific build commands; Phase 2 (Type Check) employs tools like tsc, go vet, and mypy; Phase 3 (Lint) uses eslint, clippy, and ruff; Phase 4 (Tests) runs suites with tools like npm test or pytest; Phase 5 (Security) specifically addresses security posture using npm audit, cargo audit, govulncheck, and pip-audit to detect vulnerable dependencies and secrets; Phase 6 (Diff Review) checks for debug statements and sensitive files. The use of 'allowed-tools' (Bash, Read, Grep, Glob) is appropriate for these tasks. While the skill processes project data and command outputs—creating a theoretical surface for indirect prompt injection—this is inherent to the verification process and mitigated by the skill's specific focus on detecting anomalies and providing structured reports. No malicious patterns, obfuscation, or unauthorized network behaviors were detected.