Verify

Verify Skill

Multi-perspective validation before claiming completion.

Usage

/skill:verify
/skill:verify full
/skill:verify quick

Verification Levels

Verification Dimensions

1. Functional Correctness

• Does it do what was requested?
• All acceptance criteria met?
• Edge cases handled?

2. Code Quality

• Tests pass?
• TypeScript compiles?
• Lint passes?
• No obvious issues?

3. Security

• Input validation?
• No injection vulnerabilities?
• Secrets not exposed?

4. Integration

• Works with existing code?
• No breaking changes?
• Database migrations safe?

Process

1. Read Requirements

From PR/issue/task:

What was requested?
What are acceptance criteria?

2. Run Standard Checks

# Always
npm run build
npm test

# When applicable
npm run lint
npm run typecheck

3. Review Changes

• Read all modified files
• Understand the approach
• Look for obvious issues

4. Security Review

Quick security scan:

Security-reviewer (sonnet): Check for common vulnerabilities

5. Final Assessment

Task: "Add user authentication"
Changes: 12 files, 847 lines

| Check | Status |
|-------|--------|
| Build | ✅ |
| Tests | ✅ (45/45) |
| TypeScript | ✅ (0 errors) |
| Lint | ✅ (0 warnings) |
| Security | ✅ |
| Integration | ✅ |

**Recommendation:** Approve

Output Format

## Verification Report

**Task:** Implement user authentication
**Reviewer:** verifier
**Date:** 2024-01-15
**Level:** Full

### Summary
✅ All verification checks pass. Ready for merge.

### Functional Verification

| Criterion | Status | Evidence |
|-----------|--------|----------|
| POST /auth/register works | ✅ | Tested, returns JWT |
| Password hashed | ✅ | bcrypt, cost 12 |
| Invalid input rejected | ✅ | 400 with validation errors |
| Existing user rejected | ✅ | 409 Conflict |

### Technical Verification

| Check | Status | Output |
|-------|--------|--------|
| Build | ✅ | No errors |
| Tests | ✅ | 45/45 pass |
| TypeScript | ✅ | 0 errors |
| Lint | ✅ | 0 warnings |
| Coverage | ✅ | 87% |

### Security Verification

| Check | Status | Notes |
|-------|--------|-------|
| SQL injection | ✅ | Parameterized queries |
| XSS | ✅ | Output encoded |
| Password storage | ✅ | bcrypt |
| Auth tokens | ✅ | JWT, 24h expiry |

### Changes Summary
- 12 files changed
- 847 lines added, 23 removed
- No breaking changes

### Issues Found
None.

### Recommendation
**APPROVE** - All criteria met.