Install
$ agentstack add skill-ahmadrosid-nakama-coding-agent ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Use this skill when the user wants real code work done in the current project: implementing features, fixing bugs, editing files, running targeted validation, or inspecting the repo to make a concrete change.
Keep ordinary conversation local:
- Do not invoke the coding agent for simple explanation, brainstorming, status updates, or product discussion unless code changes are actually needed.
- Do not invoke the coding agent just because the topic is technical.
- If the user only wants advice or an explanation, answer directly.
Prerequisites
- This profile must have the
bashtool assigned. - A coding agent CLI must be installed on the Nakama server host (Codex, Claude Code, OpenCode, pi, or Cursor Agent).
Install with bash when missing for npm-based CLIs (global installs affect the whole host — confirm with the operator on shared servers):
npm install -g @openai/codex
npm install -g @anthropic-ai/claude-code
npm install -g opencode-ai
npm install -g @earendil-works/pi-coding-agent
(or the equivalent bun install -g --trust … if npm is unavailable)
Cursor Agent (agent) cannot be auto-installed by Nakama. If it is missing, tell the user to install and authenticate Cursor Agent CLI on the host themselves, then verify with agent --version. Do not attempt npm install -g for Cursor.
If the injected Coding Agent Harness context lists install commands, follow those. After install, retry the coding task.
Choosing a backend
- Read the injected Coding Agent Harness context.
- If it says multiple CLIs are installed, ask the user which one to use before running. Do not pick silently. Remember their choice for this conversation only.
- If exactly one CLI is available (or the context includes a single command template), use that backend.
- If none are installed, install via bash for Codex/Claude/OpenCode/pi when appropriate, or tell the user to install Cursor Agent themselves when that is the desired backend.
Coding agent workflow
When repo work should run on a coding agent, use the bash tool to run the CLI:
- Follow the injected harness context / command template for the chosen backend when present.
- Summarize the coding task in one concrete instruction block.
- Include only the context the coding agent needs: target behavior, affected files or areas when known, constraints, and what should be verified.
- Build the shell command from the template (or backend guidance), substituting your task prompt. Escape quotes carefully or use a heredoc when the prompt is multi-line.
- Call
bashwithcodingAgent: trueand a command that starts with the harness binary (codex,claude,opencode,pi, oragent) so Nakama can recognize the harness. For Codex/Claude/OpenCode/pi, Nakama may merge provider passthrough spawn env. For Cursor Agent, spawn env stays empty — host Cursor auth is used instead. Use an explicittimeoutMssuited to the task — use 600000–1800000 ms (10–30 minutes) for substantial coding runs; keep shorter timeouts for quick checks. - Prefer precise change requests over broad open-ended prompts.
- If the user names a preferred backend, use that CLI.
- For Cursor Agent: ensure the target repo exists in the profile workspace (clone if missing), set bash cwd to that repo, run
agent -p '' --output-format text --yolowith codingAgent true (argv0 must beagent, notcd && agent). Prefer text; stream-json is summarized automatically with a full log underartifacts/coding-agent-runs/. See backend guidance.
After the coding agent returns:
- Summarize what changed in plain language using stdout/stderr from the bash result.
- Mention what was verified.
- Call out any remaining risks, gaps, or follow-up work.
- For implementation runs (feature / fix / repo change), the coding brief should require branch + commit + push +
gh pr createby default (see backend guidance, especially Cursor), unless the user explicitly asked for local-only work (exploration, draft, "just look", "don't push"). Confirm the PR URL before treating the task as done. - If the coding agent run failed (non-zero exit, timeout, or empty useful output), explain the failure clearly and decide whether to retry, adjust the prompt, or ask the user.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ahmadrosid
- Source: ahmadrosid/nakama
- License: MIT
- Homepage: https://ahmadrosid.github.io/nakama
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.