laravel-verification — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited laravel-verification (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run before PRs, after major changes, and pre-deploy.
php -v
composer --version
php artisan --version.env is present and required keys existAPP_DEBUG=false for production environmentsAPP_ENV matches the target deployment (production, staging)If using Laravel Sail locally:
./vendor/bin/sail php -v
./vendor/bin/sail artisan --versioncomposer validate
composer dump-autoload -ovendor/bin/pint --test
vendor/bin/phpstan analyseIf your project uses Psalm instead of PHPStan:
vendor/bin/psalmphp artisan testCoverage (CI):
XDEBUG_MODE=coverage php artisan test --coverageCI example (format -> static analysis -> tests):
vendor/bin/pint --test
vendor/bin/phpstan analyse
XDEBUG_MODE=coverage php artisan test --coveragecomposer auditphp artisan migrate --pretend
php artisan migrate:statusY_m_d_His_* (e.g., 2025_03_14_154210_create_orders_table.php) and describe the change clearlydown() methods and avoid irreversible data loss without explicit backupsphp artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cachestorage/ and bootstrap/cache/ are writable in the target environmentphp artisan schedule:list
php artisan queue:failedIf Horizon is used:
php artisan horizon:statusIf queue:monitor is available, use it to check backlog without processing jobs:
php artisan queue:monitor default --max=100Active verification (staging only): dispatch a no-op job to a dedicated queue and run a single worker to process it (ensure a non-sync queue connection is configured).
php artisan tinker --execute="dispatch((new App\\Jobs\\QueueHealthcheck())->onQueue('healthcheck'))"
php artisan queue:work --once --queue=healthcheckVerify the job produced the expected side effect (log entry, healthcheck table row, or metric).
Only run this on non-production environments where processing a test job is safe.
Minimal flow:
php -v
composer --version
php artisan --version
composer validate
vendor/bin/pint --test
vendor/bin/phpstan analyse
php artisan test
composer audit
php artisan migrate --pretend
php artisan config:cache
php artisan queue:failedCI-style pipeline:
composer validate
composer dump-autoload -o
vendor/bin/pint --test
vendor/bin/phpstan analyse
XDEBUG_MODE=coverage php artisan test --coverage
composer audit
php artisan migrate --pretend
php artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cache
php artisan schedule:list~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.