formal-verify
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
install-deps.shscript fetches the Apalache formal verification engine directly from its official GitHub repository releases and installs several Python libraries from the standard PyPI registry. - [COMMAND_EXECUTION]: The suite utilizes
subprocessto orchestrate several development and analysis tools, includinggitfor incremental analysis,radonandlizardfor complexity metrics, andswiftlintfor Swift code style enforcement. - [REMOTE_CODE_EXECUTION]: The skill installs and executes the Apalache verification binary to process TLA+ state-machine specifications, which is a standard procedure for behavioral verification workflows.
- [SAFE]: Employs dynamic Python module loading in
verify-behavioral.pyto execute locally-authored verification specs from the.verifier/specs/directory, which is a required function for project-specific behavioral auditing. - [SAFE]: Starts a background daemon for the Apalache server using
nohupto facilitate faster verification runs, which is a documented and standard operational feature for this toolset.
Audit Metadata