Psalm Security Analysis
cachethq/core
Runs and interprets Psalm security (taint) analysis on a Laravel project.
Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.
$ npx skills add affaan-m/ECC --skill laravel-verification -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install affaan-m/ECC laravel-verification --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/laravel-verification .claude/skills/laravel-verification && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "laravel-verification" agent skill from https://github.com/affaan-m/ECC/tree/main/skills/laravel-verification into .claude/skills/laravel-verification/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-verification", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/affaan-m/ECC/tree/main/skills/laravel-verificationType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add affaan-m/ECC --skill laravel-verification -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install affaan-m/ECC laravel-verification --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/laravel-verification .agents/skills/laravel-verification && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "laravel-verification" agent skill from https://github.com/affaan-m/ECC/tree/main/skills/laravel-verification into .agents/skills/laravel-verification/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-verification", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add affaan-m/ECC --skill laravel-verification -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install affaan-m/ECC laravel-verification --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/laravel-verification .cursor/skills/laravel-verification && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "laravel-verification" agent skill from https://github.com/affaan-m/ECC/tree/main/skills/laravel-verification into .cursor/skills/laravel-verification/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-verification", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/affaan-m/ECC.git --path skills/laravel-verification--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add affaan-m/ECC --skill laravel-verification -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install affaan-m/ECC laravel-verification --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/laravel-verification .gemini/skills/laravel-verification && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "laravel-verification" agent skill from https://github.com/affaan-m/ECC/tree/main/skills/laravel-verification into .gemini/skills/laravel-verification/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-verification", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install affaan-m/ECC laravel-verificationInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add affaan-m/ECC --skill laravel-verification -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/laravel-verification .github/skills/laravel-verification && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "laravel-verification" agent skill from https://github.com/affaan-m/ECC/tree/main/skills/laravel-verification into .github/skills/laravel-verification/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-verification", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add affaan-m/ECC --skill laravel-verification -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install affaan-m/ECC laravel-verification --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/laravel-verification .opencode/skills/laravel-verification && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "laravel-verification" agent skill from https://github.com/affaan-m/ECC/tree/main/skills/laravel-verification into .opencode/skills/laravel-verification/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "laravel-verification", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
laravel-verificationVerification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.
Laravel Verification is an agent skill from affaan-m/ECC. Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness. Use when verifying a Laravel project before merge or deploy — lint, static analysis, tests, coverage, security.
Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Backend & APIs, covering Backend development, Linting and formatting and Static analysis and SAST. It works with Laravel. The repository describes itself as: The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond. The licence is MIT.
8 steps, taken from the step headings in SKILL.md.
Read from SKILL.md and the folder at commit 2d515e4. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
phpcomposerFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Laravel Verification loads about 1.1k tokens when it runs. Until then it costs about 68 tokens; SKILL.md has 329 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- Verify `.env` is present and required keys existAutomated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from affaan-m/ECC at commit 2d515e4, republished under its MIT licence (© affaan-m). 329 words, ~1,094 tokens.
.claude/skills/laravel-verification/SKILL.md (or your agent's skills folder).Run before PRs, after major changes, and pre-deploy.
php -v
composer --version
php artisan --version.env is present and required keys existAPP_DEBUG=false for production environmentsAPP_ENV matches the target deployment (production, staging)If using Laravel Sail locally:
./vendor/bin/sail php -v
./vendor/bin/sail artisan --versioncomposer validate
composer dump-autoload -ovendor/bin/pint --test
vendor/bin/phpstan analyseIf your project uses Psalm instead of PHPStan:
vendor/bin/psalmphp artisan testCoverage (CI):
XDEBUG_MODE=coverage php artisan test --coverageCI example (format -> static analysis -> tests):
vendor/bin/pint --test
vendor/bin/phpstan analyse
XDEBUG_MODE=coverage php artisan test --coveragecomposer auditphp artisan migrate --pretend
php artisan migrate:statusY_m_d_His_* (e.g., 2025_03_14_154210_create_orders_table.php) and describe the change clearlydown() methods and avoid irreversible data loss without explicit backupsphp artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cachestorage/ and bootstrap/cache/ are writable in the target environmentphp artisan schedule:list
php artisan queue:failedIf Horizon is used:
php artisan horizon:statusIf queue:monitor is available, use it to check backlog without processing jobs:
php artisan queue:monitor default --max=100Active verification (staging only): dispatch a no-op job to a dedicated queue and run a single worker to process it (ensure a non-sync queue connection is configured).
php artisan tinker --execute="dispatch((new App\\Jobs\\QueueHealthcheck())->onQueue('healthcheck'))"
php artisan queue:work --once --queue=healthcheckVerify the job produced the expected side effect (log entry, healthcheck table row, or metric).
Only run this on non-production environments where processing a test job is safe.
Minimal flow:
php -v
composer --version
php artisan --version
composer validate
vendor/bin/pint --test
vendor/bin/phpstan analyse
php artisan test
composer audit
php artisan migrate --pretend
php artisan config:cache
php artisan queue:failedCI-style pipeline:
composer validate
composer dump-autoload -o
vendor/bin/pint --test
vendor/bin/phpstan analyse
XDEBUG_MODE=coverage php artisan test --coverage
composer audit
php artisan migrate --pretend
php artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cache
php artisan schedule:list© affaan-m, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in skills/laravel-verification of affaan-m/ECC.
Open the folder on GitHubat commit 2d515e4
We found 13 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 4 other GitHub owners. This page covers the copy in affaan-m/ECC, which our catalogue first saw on October 7, 2026.
Laravel Verification next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Laravel Verification this skillaffaan-m/ECC | 277k | 4 repos | ~1.1k | Automated safety check: Notes | MIT | |
| Psalm Security Analysiscachethq/core | 230 | — | ~4.7k | Automated safety check: Pass | Custom licence | |
| Infer Conventionsanonaddy/anonaddy | 4.9k | 5 repos | ~3.1k | Automated safety check: Pass | MIT | |
| PHP ProJeffallan/claude-skills | 12k | — | ~1.6k | Automated safety check: Notes | MIT | |
| Wordpressericrisco/rsc-harness | 180 | — | ~3k | Automated safety check: Pass | MIT | |
| Openqodexopenqodex/openqodex | 573 | — | ~2.5k | Automated safety check: Pass | Apache-2.0 |
cachethq/core
Runs and interprets Psalm security (taint) analysis on a Laravel project.
anonaddy/anonaddy
A skill your agent uses to analyze how a Laravel application is actually written and record its conventions as shared rules.
Jeffallan/claude-skills
Writes strictly typed modern PHP 8.3+ for Laravel, Symfony and plain projects, with PHPStan level 9, PHPUnit or Pest tests, typed DTOs and secure defaults.
ericrisco/rsc-harness
A skill your agent uses when building or hardening WordPress sites or WooCommerce stores and treating WordPress as the product rather than just writing PHP — block themes with theme.json, plugins…
openqodex/openqodex
Code review for the current change, before it is pushed. An agent skill from openqodex/openqodex.
aiskillstore/marketplace
Security auditor for Laravel applications. An agent skill from aiskillstore/marketplace.
affaan-m/ECC
Audits your installed Claude skills and commands for quality, with a quick mode for recently changed skills and a full mode that evaluates all of them through subagents.
affaan-m/ECC
Ingests, indexes, searches, edits and monitors video, audio and live streams through the VideoDB Python SDK, returning stream links, clips and timestamps.
affaan-m/ECC
Route broad documentation-governance requests to existing ECC skills and run an opt-in, read-only audit of mapped documentation roles, links, ADR indexes, and evidence references.
affaan-m/ECC
Scans installed skills for principles that recur across them and proposes rule-file changes: append, revise, add a section, create a file or leave as covered.
affaan-m/ECC
Builds DRAFT counterparty agreements from one markdown template and a small JSON spec per party, with clauses picked by the party's role.
affaan-m/ECC
Set an ECC-specific frontend design direction for production UI work.
Works with
Categories
Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness. Laravel Verification is an agent skill from affaan-m/ECC. Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.
Laravel Verification fits situations like: verifying a Laravel project before merge; static analysis.
Run `npx skills add affaan-m/ECC --skill laravel-verification -a claude-code`. Or copy the skill folder (skills/laravel-verification in affaan-m/ECC) into .claude/skills/laravel-verification in your project. Claude Code loads it when a task matches its description.
Run `npx skills add affaan-m/ECC --skill laravel-verification -a codex`. Or copy the skill folder (skills/laravel-verification in affaan-m/ECC) into .agents/skills/laravel-verification in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add affaan-m/ECC --skill laravel-verification -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/laravel-verification, .gemini/skills/laravel-verification, .github/skills/laravel-verification and .opencode/skills/laravel-verification in your project.
Going by SKILL.md and its folder, Laravel Verification needs the command-line tools its instructions call (php and composer).
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
Laravel Verification is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.1k tokens (SKILL.md is roughly 4.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Laravel Verification: Psalm Security Analysis (cachethq/core, 230 stars), Infer Conventions (anonaddy/anonaddy, 4.9k stars), PHP Pro (Jeffallan/claude-skills, 12k stars) and Wordpress (ericrisco/rsc-harness, 180 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
affaan-m (a GitHub user) maintains it in affaan-m/ECC, which has 276,673 GitHub stars. The repository holds 683 skills in this directory. The repository was last updated on October 11, 2026.
Source: affaan-m/ECC on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.