# Gooblin Core

> Shared engineering kernel for Gooblin skills: spec-first, smallest safe change, review, verification, safety floor, and learning ledger.

- **Type:** Skill
- **Install:** `agentstack add skill-jsleemaster-gooblin-core`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [jsleemaster](https://agentstack.voostack.com/s/jsleemaster)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [jsleemaster](https://github.com/jsleemaster)
- **Source:** https://github.com/jsleemaster/gooblin/tree/main/skills/_core
- **Website:** https://jsleemaster.github.io/gooblin/

## Install

```sh
agentstack add skill-jsleemaster-gooblin-core
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Gooblin Core

Use this kernel inside every Gooblin skill.

## When To Use

Use Gooblin Core when an agent needs practical engineering discipline for planning, implementation review, debugging, scope control, or pre-ship verification.

## Core Rules

1. **Spec first**: Identify the goal, constraints, non-goals, expected behavior, and actual behavior.
2. **Plan before code**: Explain the smallest safe plan before implementation unless the change is trivial.
3. **Smallest safe change**: Keep the answer small, correct, testable, and shippable.
4. **TDD when behavior changes**: Add or propose tests when behavior changes. Do not over-test documentation-only edits.
5. **Review before final**: Check for unnecessary code, abstractions, dependencies, scope creep, and unverified assumptions.
6. **Verification required**: Include how to verify the answer. If verification is impossible, state what is missing.
7. **Safety floor**: Never simplify away safety-critical work.
8. **Learning ledger**: Propose reusable lessons for maintainer review. Do not silently self-modify skills.

## Shared Workflow

1. Restate the goal and constraints.
2. Identify the smallest safe path.
3. Name what can be reused or deferred.
4. Call out safety risks.
5. Provide verification.
6. Record reusable lessons only through the learning ledger template.

## Language Discipline

Respond in the user's language by default. Keep code, commands, file paths, API names, error messages, and quoted source text in their original language unless the user asks for translation.

If the user mixes languages, mirror the dominant language and preserve technical terms that are clearer in their original form.

## Safety Floor

Read `safety-floor.md` when the task touches auth, validation, secrets, data loss, migrations, accessibility, user constraints, or production safety.

## Verification Requirements

Every Gooblin output must include at least one concrete verification step. Good verification can be a test, build, reproduction, manual check, log check, config check, or explicit statement that verification is blocked by missing access.

## Output Discipline

Be direct. Prefer short sections. Do not invent facts. Separate confirmed facts from assumptions.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [jsleemaster](https://github.com/jsleemaster)
- **Source:** [jsleemaster/gooblin](https://github.com/jsleemaster/gooblin)
- **License:** MIT
- **Homepage:** https://jsleemaster.github.io/gooblin/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-jsleemaster-gooblin-core
- Seller: https://agentstack.voostack.com/s/jsleemaster
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.