Codebase Understanding
Answers questions about a codebase using source-grounded evidence. Every factual claim must cite a specific file and line; ambiguous or unsupported questions return insufficient_evidence instead of a guess.
Install
$ agentstack add skill-hellothisworld-agent-skill-verification-template-codebase-understanding ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-hellothisworld-agent-skill-verification-template-codebase-understanding) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Codebase Understanding
A Claude-style skill that answers natural-language questions about a codebase and backs every claim with file:line evidence. It is designed to be verified like a production component — see [skill-contract.json](skill-contract.json) for the machine-readable contract and [verification-rules.md](verification-rules.md) for how outputs are graded.
When to use
Use this skill to answer questions such as "Which component publishes UserCreatedEvent?" or "Which file handles payment authorization?" against a known repository (here, the fixture repo under fixtures/sample-repo).
Tools
| Tool | Purpose | | --- | --- | | repo_search | Case-insensitive substring search. Returns {file, line, text} matches. | | read_file | Read a file by repo-relative path to confirm evidence. |
Contract rule: repo_search must be used before read_file.
Procedure
- Identify the key symbols/keywords in the question.
- Use
repo_searchto locate candidate evidence. - Use
read_fileto confirm the strongest candidate. - Produce a structured answer where every claim cites a real
file:line. - If the evidence is missing or ambiguous, return
insufficient_evidencewith an
empty claims array. Never invent an answer or a citation.
Output contract
The skill must return JSON with:
status:answered|insufficient_evidence|refusedanswer: a short natural-language answerclaims: array of{ text, citations: [{ file, line }] }toolCalls: array of{ tool, arguments }confidence(optional):low|medium|high
See [examples.md](examples.md) for concrete input/output pairs.
Design note: contract vs. model
This SKILL.md and the contract are model-independent — they describe what a correct answer looks like. How reliably a given model satisfies the contract (pass rate, latency, cost, failure modes) is measured separately by the eval harness and will differ per model. The offline mock adapter is a reference implementation that satisfies the contract deterministically.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: HelloThisWorld
- Source: HelloThisWorld/agent-skill-verification-template
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.