Skip to content
Back to skills

Verify App

ASecurity

Create, run, or maintain a project's reusable verification commands and feature map; collect runtime evidence for software changes.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 11, 2026
developmentgogitapi

Works with

  • cli
  • api

Security analysis

A100/100

Pro scans all 3 files and shows the line behind each finding

Scanned November 11, 2026

npx -y skills add thekusaldarshana/vibecoding-harness --skill verify-app --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Verify App?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Verify App
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/thekusaldarshana-verify-app/badge)](https://www.skillsdirectory.com/skills/thekusaldarshana-verify-app)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: verify-app
description: Create, run, or maintain a project's reusable verification commands and feature map; collect runtime evidence for software changes.
---

# Verify the application

Read `.vcharn/verification.json`, `.vcharn/features/README.md`, and the
relevant feature pages. Inspect each configured command before executing it:
repository commands run with the agent's permissions and are not sandboxed
by vcharn. Honor the user's scope for side effects and environment access.

- For first-time setup, read [setup.md](references/setup.md).
- For stale controls, coverage gaps, or a maintenance request, read
  [maintain.md](references/maintain.md).
- For a change, select checks and journeys that exercise its acceptance
  conditions and regression risks; run `vcharn verify run [check-name]`.

Inspect command logs, assertions, and runtime observations. An exit code of
zero is evidence about the command, not automatic proof of every feature.
A `runtime` label is a declared category, not a test of what the command did.
Use real user journeys for UI work, real requests for API work, and real
invocations for CLI work. Store screenshots/traces when useful and possible.
Evidence must exclude credentials and private data; `.vcharn/evidence/`
should be ignored by git. No production writes are authorized by this skill.

Report the observed result, evidence paths, checks run, and omitted coverage.
Fix demonstrated failures, rerun affected checks, and stop when sufficient.
When credentials or tools are unavailable, leave affected behavior unverified
and state the prerequisite. Do not weaken assertions to manufacture success.

Files in this skill

  • SKILL.md1.6 KB
  • references/maintain.md839 B
  • references/setup.md1.7 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in development →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.