unopim-verify
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard development quality assurance workflows for a PHP/Laravel project (UnoPim).
- [COMMAND_EXECUTION]: The
verify.shscript executes local project binaries such asvendor/bin/pint,vendor/bin/pest, andvendor/bin/phpstan. These are standard development tools and are executed from the project's own vendor directory. - [EXTERNAL_DOWNLOADS]: The skill uses
npx playwright testwhich may download dependencies if not present, but this is restricted to the localtests/e2e-pwdirectory and is a standard part of the project's testing suite. - [SAFE]: The skill attempts to locate a local environment detection script (
../unopim-exec/detect-env.sh) to resolve execution wrappers. If missing, it safely falls back to host PHP defaults. - [SAFE]: Writing to
$PROJECT_ROOT/.verify-stampis a local persistence mechanism used solely for tracking verification status within the development environment.
Audit Metadata