# Official Source Check

> Use when external behavior must be checked against official sources.

- **Type:** Skill
- **Install:** `agentstack add skill-kreek-consult-official-source-check`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [kreek](https://agentstack.voostack.com/s/kreek)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [kreek](https://github.com/kreek)
- **Source:** https://github.com/kreek/consult/tree/main/consult/skills/official-source-check

## Install

```sh
agentstack add skill-kreek-consult-official-source-check
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Official Source Check

## Iron Law

`MODEL MEMORY IS A HINT, NOT EVIDENCE, FOR VERSION-SENSITIVE BEHAVIOR.`

## When to Use

- Implementation depends on current external framework, library, runtime,
  browser, SDK, cloud, or platform behavior.
- The repo does not already prove the exact API, configuration, migration,
  browser behavior, or provider contract.
- The user asks for current, official, documented, verified, or best-practice
  implementation.

## When NOT to Use

- Project-local logic with tests and no external API dependency.
- Stable language syntax covered by the compiler, linter, or type checker.
- Typos, formatting, prose-only edits, or mechanical metadata changes.
- Emergency mitigation where the user accepts unverified risk.

## Workflow

1. Find the local version from manifests, lockfiles, imports, generated
   clients, schemas, config, or CI images.
2. Check the narrow source of truth: official docs, release notes, migration
   guide, standards spec, or provider SDK reference.
3. Compare that source with local conventions.
4. Use the smallest source-compatible implementation.
5. In the final claim, name the source checked or mark the claim unverified.

## Verification

- [ ] Local version or platform was identified, or its absence was reported.
- [ ] The source of truth was checked for the exact pattern.
- [ ] Deprecated or version-incompatible APIs were avoided.
- [ ] Conflicts between source guidance and local convention were surfaced.
- [ ] Unverified external-behavior claims were marked unverified.
- [ ] Runtime behavior was proven when source guidance alone did not prove it.

## Tripwires

| Trigger | Do this instead | False alarm |
| --- | --- | --- |
| "I know this API" | Check the local version and source of truth. | Project-local helper with tests. |
| "The docs are too broad" | Check the narrow API, migration, or release-note page. | Offline task where user accepts unverified output. |
| "Existing code does it this way" | Check whether the pattern is still supported before copying it. | Repo policy pins an older supported pattern. |
| "I'll cite a blog post" | Use official docs, standards, release notes, or provider references first. | The project owns the library being edited. |

## Handoffs

- Use `workflow` to choose the full skill set.
- Use `proof` when source guidance must be backed by runtime behavior.
- Use `documentation` when the checked source needs to be captured for
  maintainers.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [kreek](https://github.com/kreek)
- **Source:** [kreek/consult](https://github.com/kreek/consult)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-kreek-consult-official-source-check
- Seller: https://agentstack.voostack.com/s/kreek
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.