Catalog
affaan-m/laravel-verification

affaan-m

laravel-verification

Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness. Use when verifying a Laravel project before merge or deploy — lint, static analysis, tests, coverage, security.

NewUpdated Sep 9, 2026

Laravel Verification Loop

Run before PRs, after major changes, and pre-deploy.

When to Use

  • Before opening a pull request for a Laravel project
  • After major refactors or dependency upgrades
  • Pre-deployment verification for staging or production
  • Running full lint -> test -> security -> deploy readiness pipeline

How It Works

  • Run phases sequentially from environment checks through deployment readiness so each layer builds on the last.
  • Environment and Composer checks gate everything else; stop immediately if they fail.
  • Linting/static analysis should be clean before running full tests and coverage.
  • Security and migration reviews happen after tests so you verify behavior before data or release steps.
  • Build/deploy readiness and queue/scheduler checks are final gates; any failure blocks release.

Phase 1: Environment Checks

php -v
composer --version
php artisan --version
  • Verify .env is present and required keys exist
  • Confirm APP_DEBUG=false for production environments
  • Confirm APP_ENV matches the target deployment (production, staging)

If using Laravel Sail locally:

./vendor/bin/sail php -v
./vendor/bin/sail artisan --version

Phase 1.5: Composer and Autoload

composer validate
composer dump-autoload -o

Phase 2: Linting and Static Analysis

vendor/bin/pint --test
vendor/bin/phpstan analyse

If your project uses Psalm instead of PHPStan:

vendor/bin/psalm

Phase 3: Tests and Coverage

php artisan test

Coverage (CI):

XDEBUG_MODE=coverage php artisan test --coverage

CI example (format -> static analysis -> tests):

vendor/bin/pint --test
vendor/bin/phpstan analyse
XDEBUG_MODE=coverage php artisan test --coverage

Phase 4: Security and Dependency Checks

composer audit

Phase 5: Database and Migrations

php artisan migrate --pretend
php artisan migrate:status
  • Review destructive migrations carefully
  • Ensure migration filenames follow Y_m_d_His_* (e.g., 2025_03_14_154210_create_orders_table.php) and describe the change clearly
  • Ensure rollbacks are possible
  • Verify down() methods and avoid irreversible data loss without explicit backups

Phase 6: Build and Deployment Readiness

php artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cache
  • Ensure cache warmups succeed in production configuration
  • Verify queue workers and scheduler are configured
  • Confirm storage/ and bootstrap/cache/ are writable in the target environment

Phase 7: Queue and Scheduler Checks

php artisan schedule:list
php artisan queue:failed

If Horizon is used:

php artisan horizon:status

If queue:monitor is available, use it to check backlog without processing jobs:

php artisan queue:monitor default --max=100

Active verification (staging only): dispatch a no-op job to a dedicated queue and run a single worker to process it (ensure a non-sync queue connection is configured).

php artisan tinker --execute="dispatch((new App\\Jobs\\QueueHealthcheck())->onQueue('healthcheck'))"
php artisan queue:work --once --queue=healthcheck

Verify the job produced the expected side effect (log entry, healthcheck table row, or metric).

Only run this on non-production environments where processing a test job is safe.

Examples

Minimal flow:

php -v
composer --version
php artisan --version
composer validate
vendor/bin/pint --test
vendor/bin/phpstan analyse
php artisan test
composer audit
php artisan migrate --pretend
php artisan config:cache
php artisan queue:failed

CI-style pipeline:

composer validate
composer dump-autoload -o
vendor/bin/pint --test
vendor/bin/phpstan analyse
XDEBUG_MODE=coverage php artisan test --coverage
composer audit
php artisan migrate --pretend
php artisan optimize:clear
php artisan config:cache
php artisan route:cache
php artisan view:cache
php artisan schedule:list
Files1
1 files · 1.0 KB

Select a file to preview

Overall Score

82/100

Grade

B

Good

Grades are signals, not a certification. Always review a skill yourself before use.

Safety

85

Quality

82

Clarity

87

Completeness

76

Summary

This skill guides Laravel project verification through a structured 7-phase pipeline: environment checks, composer validation, linting/static analysis, tests with coverage, security/dependency audits, database migration review, and deployment readiness. It runs standard Laravel tooling (Pint, PHPStan, Artisan) sequentially with clear gates at each stage, using read-only commands to verify project state before merge or deployment.

Static Analysis Findings

1 finding

Patterns detected by deterministic static analysis before AI scoring. Hover over any finding code for detailed information and remediation guidance.

Credential Exposure
SEC-020Direct .env File Access

Direct .env file access

SKILL.md.env

Detected Capabilities

shell command executionfile presence verificationenvironment variable readingcode analysis (PHPStan/Psalm)code formatting checks (Pint)test execution with coveragedependency auditingmigration preview (--pretend)cache configurationqueue status inspection

Trigger Keywords

Phrases that agents use to match this skill to user intent.

laravel verificationpre-deploy checkslint and test pipelinemigration reviewsecurity audit composerphp artisan verifydeployment readiness

Risk Signals

INFO

SEC-020: Direct .env file access — verifying `.env` is present and reading required keys for production safety checks

SKILL.md | Phase 1: Environment Checks

Use Cases

  • Verify Laravel projects before opening pull requests
  • Run full verification pipeline before staging/production deployment
  • Check environment configuration and APP_DEBUG settings pre-deploy
  • Run linting, static analysis, and tests in sequence with gates
  • Audit composer dependencies for security vulnerabilities
  • Review and validate database migrations before running
  • Verify cache warming, queue workers, and scheduler configuration in production

Quality Notes

  • ✓ Clear phase-based architecture with sequential execution and explicit gates between stages
  • ✓ Well-documented boundaries: read-only verification commands, no file writes or deletions
  • ✓ Practical examples provided (minimal flow, CI-style pipeline) with commands ready to copy
  • ✓ Comprehensive edge case coverage: Sail support, Psalm alternative, Horizon and queue monitors, migration validation
  • ✓ Security-conscious: emphasizes APP_DEBUG=false, migrate --pretend instead of actual runs, staging-only job dispatch
  • ✓ Environment awareness: distinguishes production vs staging operations (e.g., active queue verification staging-only)
  • ~ .env verification step documented in prose but not in code examples — could be formalized as a script
  • ~ No error handling guidance: skill does not explain recovery if a phase fails (e.g., linting fails before tests)
Model: claude-haiku-4-5-20251001Analyzed: Sep 9, 2026

Reviews

Add this skill to your library to leave a review.

No reviews yet

Be the first to share your experience.

Version History

  1. v2.0

    Contract changed: description

    ✦ AIUpdated skill activation guidance: now explicitly triggers when verifying before merge or deploy.

    triggering2026-09-09

    LATEST
  2. v1.2

    Content updated

    ✦ AINo behavioral changes detected; safety grade improved to A.

    2026-07-14

    View This Version
  3. v1.1

    Content updated

    ✦ AIAdds LICENSE file.

    2026-04-20

    View This Version
  4. v1.0

    2026-04-12

    View This VersionInitial version

Use affaan-m/laravel-verification in your dev environment

Command Palette

Search for a command to run...