unopim-verify

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard development quality assurance workflows for a PHP/Laravel project (UnoPim).
  • [COMMAND_EXECUTION]: The verify.sh script executes local project binaries such as vendor/bin/pint, vendor/bin/pest, and vendor/bin/phpstan. These are standard development tools and are executed from the project's own vendor directory.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx playwright test which may download dependencies if not present, but this is restricted to the local tests/e2e-pw directory and is a standard part of the project's testing suite.
  • [SAFE]: The skill attempts to locate a local environment detection script (../unopim-exec/detect-env.sh) to resolve execution wrappers. If missing, it safely falls back to host PHP defaults.
  • [SAFE]: Writing to $PROJECT_ROOT/.verify-stamp is a local persistence mechanism used solely for tracking verification status within the development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 05:35 AM