Jakeschincariol/replica-skill

No problems traced to this repository code in these checks.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The tools run with no install step: they need Python 3.8+ and nothing from pip.: Real input produced the expected result: 9 pairs, 0 failing AA

  Source: The tools need Python 3.8 or newer. Nothing to pip install.

  Input: replica-design/tokens.json

  Expected: contrast report runs and checks 9 pairs

  Command: python3 replica-design/contrast.py replica-design/tokens.json

  Observed: 9 pairs, 0 failing AA

• Store listing linter checks App Store and Google Play limits from a listing file, and the example listing has no errors.: Real input produced the expected result: 0 errors, 1 warnings

  Source: Six of them, all standard-library Python. None touch the network.

  Input: replica-launch/listing.example.json

  Expected: 0 errors, 1 warnings

  Command: python3 replica-launch/listing.py replica-launch/listing.example.json

  Observed: 0 errors, 1 warnings

Examples

• Run the documented test suite (57 offline unit tests): command completed successfully

  Source: README.md: Tests section, python3 -m unittest discover -s tests -v

  Input: tests/ directory

  Expected: all 57 tests pass, exit 0

  Command: python3 -m unittest discover -s tests -v

  Observed: gs_are_surfaced) ... ok test_cli_exit_codes_and_config (test_sweep.Sweep.test_cli_exit_codes_and_config) ... ok test_finds_names_paths_domains_and_colours (test_sweep.Sweep.test_finds_names_paths_domains_and_colours) ... ok test_include_replica (test_sweep.Sweep.test_include_replica) ... ok test_short_hex_matches_long (test_sweep.Sweep.test_short_hex_matches_long) ... ok test_skips_planning_folder_deps_locks_and_binaries (test_sweep.Sweep.test_skips_planning_folder_deps_locks_and_binaries) ... ok ---------------------------------------------------------------------- Ran 57 tests in 1.014s OK

• Score feature parity from the feature matrix template: command completed successfully

  Source: README.md: parity.py usage, python3 replica-diff/parity.py replica/features.csv

  Input: replica-recon/features.csv (template, 0 of 9 must-haves done)

  Expected: Parity 0.0 / 100 and not shippable

  Command: python3 replica-diff/parity.py replica-recon/features.csv

  Observed: il or Google, no - [should] availability: Buffer time before and after meetings, no - [should] booking page: Custom questions on the booking form, no - [should] integrations: Video link added to the invite, no - [should] notifications: Email reminders before the meeting, no - [should] payments: Take payment at booking, no - [could] analytics: Analytics on bookings, no - [could] sharing: Embed the booking page on a website, no - [could] team: Team round-robin, no Left out on purpose (not scored) - Marketplace of third-party apps: their partner network is not part of the product you can rebuild

Local or hosted: local

Run the replica-skill Python tools (listing linter, WCAG contrast checker, parity scorer) and the offline unit test suite, as documented in README.md

cd <guest-path> && pwd && ls -la && id -u && python3 --version && cat README.md 2>/dev/null | head -200
ls -la /inputs 2>/dev/null; ls -la <guest-path> 2>/dev/null; cd <guest-path> && git status 2>&1 | head -3
cd <guest-path> && ls -la .coldpass tests replica-diff replica-entrepreneur replica-brand replica-launch replica-design replica-recon && cat .gitignore && head -40 replica-recon/features.csv && head -5 replica-entrepreneur/themes.json && head -30 replica-diff/parity.py && head -40 replica-entrepreneur/reviews.py
cd <guest-path> && python3 -m unittest discover -s tests -v 2>&1 | tail -15; echo "rc=$?"; python3 replica-diff/parity.py replica-recon/features.csv; echo "rc=$?"
cd <guest-path> && python3 -c "import sys;print(sys.version)" && python3 replica-entrepreneur/reviews.py --help 2>&1 | head -20; python3 replica-brand/sweep.py --help 2>&1 | head -5; python3 replica-design/contrast.py --help 2>&1 | head -5; python3 replica-launch/listing.py --help 2>&1|head -5
cd <guest-path> && python3 replica-launch/listing.py replica-launch/listing.example.json; echo "rc=$?"; echo ---; python3 replica-design/contrast.py replica-design/tokens.json; echo "rc=$?"; echo ---; python3 replica-brand/sweep.py . --avoid "Original App"; echo "rc=$?"
cd <guest-path> && grep -rniE "cron|schedul|--once|--now|webhook|loop|while True|sleep\(" --include=*.py --include=*.md --include=*.json . | grep -v tests/ | head -20; echo ---; grep -n "Six of them, all standard-library Python. None touch the network." README.md; grep -n "The tools need Python 3.8 or newer. Nothing to pip install." README.md; grep -n "python3 -m unittest discover -s tests -v" README.md; echo ---; grep -n "argv\|expected_file\|--validate" <guest-path> | head -30
cd <guest-path> && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["python3","replica-launch/listing.py","replica-launch/listing.example.json"],"cwd":"<guest-path>","expected_text":"0 errors, 1 warnings"}
EOF
cat > .coldpass/claims.json <<'EOF'
[
{"kind":"claim","claim":"The tools run with no install step: they need Python 3.8+ and nothing from pip.","source":"The tools need Python 3.8 or newer. Nothing to pip install.","input":"replica-design/tokens.json","expected":"contrast report runs and checks 9 pairs","probe_kind":"cli","argv":["python3","replica-design/contrast.py","replica-design/tokens.json"],"expected_text":"9 pairs, 0 failing AA","cwd":"<guest-path>"},
{"kind":"claim","claim":"Store listing linter checks App Store and Google Play limits from a listing file, and the example listing has no errors.","source":"Six of them, all standard-library Python. None touch the network.","input":"replica-launch/listing.example.json","expected":"0 errors, 1 warnings","probe_kind":"cli","argv":["python3","replica-launch/listing.py","replica-launch/listing.example.json"],"expected_text":"0 errors, 1 warnings","cwd":"<guest-path>"}
]
EOF
cat > .coldpass/examples.json <<'EOF'
[
{"kind":"example","claim":"Run the documented test suite (57 offline unit tests)","source":"README.md: Tests section, python3 -m unittest discover -s tests -v","input":"tests/ directory","expected":"all 57 tests pass, exit 0","argv":["python3","-m","unittest","discover","-s","tests","-v"],"cwd":"<guest-path>"},
{"kind":"example","claim":"Score feature parity from the feature matrix template","source":"README.md: parity.py usage, python3 replica-diff/parity.py replica/features.csv","input":"replica-recon/features.csv (template, 0 of 9 must-haves done)","expected":"Parity 0.0 / 100 and not shippable","argv":["python3","replica-diff/parity.py","replica-recon/features.csv"],"cwd":"<guest-path>","expected_text":"Parity: 0.0 / 100"}
]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Entry points inspected: replica-*/ *.py tools (reviews, parity, imgdiff, contrast, sweep, listing) are one-shot CLIs with no cron, scheduler, loop, --once/--now, or webhook handling. Grep for cron/schedule/webhook/loop found only SKILL.md prose and architecture templates describing a product the user would build, not this repo's runtime. Each tool runs once and exits.","checks":[]}
EOF
python3 -m json.tool .coldpass/probe.json >/dev/null && python3 -m json.tool .coldpass/claims.json >/dev/null && python3 -m json.tool .coldpass/examples.json >/dev/null && python3 -m json.tool .coldpass/cycles.json >/dev/null && echo JSON_OK
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay; echo "rc=$?"
cd <guest-path> && cat > .coldpass/report.json <<'EOF'
{
  "outcome": "working",
  "fault_owner": null,
  "operation": "Run the replica-skill Python tools (listing linter, WCAG contrast checker, parity scorer) and the offline unit test suite, as documented in README.md",
  "operation_scope": "Linux Ubuntu guest, Python 3.12.3 (README requires 3.8+). Stdlib only, no pip install, no network, no browser, no credentials. Runs on shipped example inputs and the feature-matrix template. Does not exercise the Claude skills (SKILL.md prompts), which need Claude Code.",
  "steps": [
    "python3 -m unittest discover -s tests -v  (57 tests, all OK)",
    "python3 replica-diff/parity.py replica-recon/features.csv  (Parity 0.0 / 100, template)",
    "python3 replica-launch/listing.py replica-launch/listing.example.json  (0 errors, 1 warnings)",
    "python3 replica-design/contrast.py replica-design/tokens.json  (9 pairs, 0 failing AA)",
    "python3 replica-brand/sweep.py . --avoid \"Original App\"  (ran; exit 1 with 14 hits in repo docs/code, a real finding, not used as a probe)"
  ],
  "deviations": [
    "No git init/fetch was needed: the tools ran directly in the snapshot. Pinned commit was not fetched.",
    "/inputs/coldpass-preflight.py does not exist in this guest; ran the available checker <guest-path> with --validate --replay, which passed.",
    "replica/ folder (user project data) is not present; used the shipped templates replica-recon/features.csv and replica-launch/listing.example.json as inputs. No reviews.csv was invented, so reviews.py was not exercised.",
    "README's workflow (/replica-recon, /replica-build, etc.) is Claude skill prompts run inside Claude, not CLI commands; they were not run."
  ],
  "stuck_step": null,
  "main_blocker": null,
  "plain_failure": null,
  "suggested_fix": "None needed for the Python tools. Note: the sweep check reports the original app's name in the repo's own README and skill docs, so a rebrand sweep run on this repo will fail by design."
}
EOF
python3 -m json.tool .coldpass/report.json >/dev/null && echo OK && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay | head -c 300; echo; ls -la .coldpass