Automated summary
Connects, indexes, and syncs a repository with NgodingPakeAI through its CLI, and supports working on tasks assigned from the platform.
Strengths
- Explicit command sequence (doctor, connect, status, index, sync) makes syncing repeatable
- Clear privacy modes: Basic Sync uploads no raw source code, while Full Code Context is opt-in
- Strong guardrails: the CLI acts as the security gate and secrets, .env files, node_modules, and build artifacts are excluded
- Built-in task workflow (task next, start, complete, fail) with PRD retrieval for project context
Limitations
- Relies on an external service plus an ngpk_ token and a workspace ID supplied by the user
- The SKILL.md is truncated at the end of the command reference, so some options are not documented here
- Requires Node.js and network access to run the CLI through npx
Use it when you need to link a repo to NgodingPakeAI, refresh its index, or work a task pasted in a <task> block.
Avoid it when the project must not share any context with a third-party service or when no NgodingPakeAI token is available.
Security analysis
CautionNo destructive, obfuscated, or credential-exfiltrating instructions are present, and the skill includes sensible hard rules (respect .gitignore/.ngodingpakeaiignore, never upload secrets/.env, stop on secret warnings, no direct API calls, opt-in only for full source upload). However, it executes an unpinned remote npm package and deliberately sends project metadata and (optionally) code to a third-party service, which warrants caution rather than a clean 'safe' rating.
- •Runs `npx ngodingpakeai` — an unpinned third-party npm package that is downloaded and executed with full local privileges on every command (supply-chain risk; no version pin or integrity check).
- •By design uploads repository context (file tree, metadata, framework detection, routes, and AI-generated summaries) to an external service (ngodingpakeai.com); opt-in 'Full Code Context' additionally uploads source snippets.
- •Token is passed on the command line (`--token "$NGODINGPAKEAI_TOKEN"`), which can leak via shell history and process listings; env var usage is preferred but the flag variant is documented.
- •Guidance relies on trusting the CLI as the 'security gate' for what leaves the machine; the agent has no independent verification of what is transmitted.
Examples
Connect this repository to NgodingPakeAI workspace ws_12345 and sync the codebase context. My token is in $NGODINGPAKEAI_TOKEN.Re-index this repo with NgodingPakeAI and tell me the indexed file count, ignored files, and any warnings before syncing.Here is my NgodingPakeAI task: <task>plan: plan_789, task: TASK-42 — add pagination to the orders list endpoint</task>. Fetch the plan PRD and implement it.name: ngodingpakeai description: "Connect, index, and sync the current repository with NgodingPakeAI for project memory and safe codebase context, AND work on assigned NgodingPakeAI tasks. Use when the user asks to connect, index, or sync this codebase, pastes a <task> block, or mentions NgodingPakeAI."
NgodingPakeAI — Codebase Sync
NgodingPakeAI is the project-memory and codebase-context layer for AI coding agents. It does NOT replace you — it gives you organized project memory and safe codebase context through its CLI. When the user asks to connect, index, or sync this repository with NgodingPakeAI, follow this skill.
The CLI is the security gate. It decides what may leave the machine. You operate it; you never upload files yourself or call the HTTP API directly.
Prerequisites
- Node.js available (the CLI runs via
npx ngodingpakeai …). - Workspace ID:
<workspace_id> - An access token starting with
ngpk_. Provide it via theNGODINGPAKEAI_TOKENenvironment variable (preferred) or the--tokenflag onconnect. Create one at https://www.ngodingpakeai.com/workspace → "Connect Codebase".
Instructions — run these in order
npx ngodingpakeai doctor— check environment + connectivity.npx ngodingpakeai connect --workspace <workspace_id> --token "$NGODINGPAKEAI_TOKEN"— link this repo to the workspace.npx ngodingpakeai status— show current sync state.npx ngodingpakeai index— scan locally and build the safe index (file map, selected files, summaries). Review the printed summary.- If there are NO critical warnings:
npx ngodingpakeai sync— upload the safe context. npx ngodingpakeai status— confirm the result.- Report to the user: the workspace URL, indexed file count, ignored file count, and any warnings.
Privacy modes
- Basic Sync (default): uploads the file tree, metadata, framework detection, routes, and AI summaries — not your raw source code.
- Full Code Context (opt-in): additionally uploads safe code snippets for more precise answers. The CLI asks for confirmation. Enable it ONLY if the user agrees.
Hard rules — do not violate
- Use the CLI for everything. Do not manually read or upload files. Do not call the API directly.
- Never upload secrets,
.env*files, private keys,node_modules, build outputs (dist,.next,build,out), database dumps, or logs. - Respect
.gitignoreand.ngodingpakeaiignore. If the CLI blocks a file, do not bypass it. - If the CLI reports a potential secret, STOP and ask the user before continuing.
- Do not read or print the contents of
.envfiles. - Always report the final workspace URL and sync summary.
Command reference
| Command | Purpose |
| --- | --- |
| npx ngodingpakeai doctor | Verify environment, token, and connectivity. |
| npx ngodingpakeai connect --workspace <id> --token <ngpk_…> | Link the repo to a workspace. |
| npx ngodingpakeai status | Show connection + last sync state. |
| npx ngodingpakeai index | Build the local safe index (no upload). |
| npx ngodingpakeai sync | Upload the safe context to the workspace. |
| npx ngodingpakeai plan get <planId> | Print a plan's PRD (project context) before working its tasks. |
| npx ngodingpakeai task next --plan <planId> | Serve the SINGLE next task to work (full prompt inline), page-ordered & frontend-first. The main loop; --json to script. |
| npx ngodingpakeai task list | List the current SLICE — one phase × one layer (frontend-first) when scoped to a plan; --json to script. |
| npx ngodingpakeai task get <ref> | Fetch a task's title + plan/feature context (no per-task prompt or description; combine with the PRD + your code reading). |
| npx ngodingpakeai task start <ref> | Mark a task in-progress (status: doing). |
| npx ngodingpakeai task complete <ref> | Mark a task done. |
| npx ngodingpakeai task fail <ref> "<reason>" | Report a task stuck/failed with a reason. |
| npx ngodingpakeai task reset <ref> "<reason>" | Put a task back to todo; a done task asks for confirmation. Only when the user asks. |
| npx ngodingpakeai disconnect | Unlink the repo. |
<ref>is a task reference: either the readable path<plan>/<feature>/<task>(e.g.tokoku/autentikasi/buat-form-login, as shown bytask list) or the task's UUID. Both resolve to the same task — prefer the readable path.
What the workspace can do after sync
- Codebase overview: framework, file tree, routes, key modules, last sync + warnings.
- Better, context-aware prompts for you (relevant files, patterns, conventions).
- Feature → file mapping (which files a change likely touches).
- "Continue project" guidance based on what's already implemented.
Working on tasks (assigned via a <task> block)
When the user hands you a task — usually by pasting a block like:
Work on NgodingPakeAI task:
<task identifier="manajemen-konten/transaksi/buat-tabel-transaksi-migrasi">
<title>Buat tabel transaksi & migrasi</title>
<feature>Manajemen Konten</feature>
</task>
Use the identifier as the <ref> below (readable path; the task's UUID also
works). Drive it through the CLI — do NOT guess the work from the title alone:
npx ngodingpakeai task get <ref>— read the task'stitle+ its feature/plan context. Figure out the work from thetitle, the PRD (plan get), and your own reading of the codebase (there's no per-task prompt or description).npx ngodingpakeai task start <ref>— mark it in-progress before you begin.- Do the work. First explore the existing code & conventions, then follow them. Stay within the task's scope — don't invent files/libraries outside the stack.
- When done:
npx ngodingpakeai task complete <ref>.
If you get stuck (don't go silent)
If you can't finish — blocked, missing info, repeated failure — REPORT it instead of stalling:
npx ngodingpakeai task fail <ref> "alasan singkat: apa yang nge-block & sudah coba apa"
This flips the task to failed and records your reason so the human can unblock
it. Reporting a clear blocker is success, not failure.
Putting a task back to todo (reset) — only when the USER asks
A task can be sent back to todo so it can be picked up fresh later:
npx ngodingpakeai task reset <ref> "alasan singkat kenapa dibalikin"
This clears the "already pulled" mark and appends your reason to the task's log — the earlier log lines stay, so the history of what was tried is preserved.
Never reset a task on your own initiative. Do it ONLY when the user explicitly
asks (e.g. "balikin task ini ke todo", "reset task itu", "batalin yang lagi
dikerjain"). Do not reset to escape a task you find hard — if you're blocked, use
task fail and explain. Resetting a done task reopens finished work, so the CLI
will show the task and require explicit user confirmation. Never answer that prompt
on the user's behalf or add --yes unless the user has explicitly confirmed the
completed-task reset.
Working through tasks — ONE task at a time via task next (the main loop)
Do NOT pull the whole backlog and grind through it in one context — that's what makes
output degrade. Instead let the server hand you ONE task at a time and give each its own
clean focus. The backlog is ordered into phases (build order) and, within each phase,
layers (frontend first, then backend), then by page (feature) and position. task next walks that order for you: it returns the SINGLE next task — the FIRST page's frontend
tasks first, backend later.
When the user says "kerjakan task" (or hands you a feature/plan instead of a single
<task> block), read the PRD once, then loop:
npx ngodingpakeai plan get <planId> # PRD: project goal, features, tech stack (once)
npx ngodingpakeai task next --plan <planId> --json # THE single next task
The task next JSON is { done, task, progress }:
done: true→ no task left. STOP and report to the user. You're finished.task→{ ref, title, ... }— work from thetitle, backed by the PRD and your own reading of the codebase. There is no per-taskpromptordescriptionfield; don't wait for one.progress→{ page, phase: { current, total }, layer, remainingInPage, remainingInLayer }— mostly context, BUT tracklayerandphase.current: a change marks a checkpoint where you stop for the user to verify (see below).
Checkpoints — stop at each layer/phase boundary. Remember the layer and
phase.current of the task you just finished. When task next returns a task whose
layer differs (e.g. frontend→backend) OR whose phase.current is higher, do NOT
task start it. STOP, report what's done (e.g. "✅ Frontend phase 1 done — click through
it in the browser"), and WAIT for the user to say "lanjut"/"continue". Then resume
task next and keep going to the next boundary. The FIRST task of a session (no previous
task) is NOT a checkpoint — just start it.
For each served task:
- Read the PRD FIRST (once, at the start) — it's the project's intent.
- Checkpoint gate: if this task's
layer/phase.currentcrossed a boundary vs the last one you finished, STOP and wait for the user (above) instead of starting. task start <ref>— mark it in-progress.- Do ONLY this task, to completion: explore the existing code & conventions first, then follow them. Do NOT read or start any other task while this one is open.
task complete <ref>(ortask fail <ref> "alasan"if blocked).- Call
task nextagain for the next one. Repeat untildone: true(pausing at each layer/phase boundary for the user to verify).
One task per loop = clean context = sharper output. Trust the order — never batch several tasks into one context to "save round-trips"; that defeats the whole point.
Frontend-first: task next serves frontend tasks before backend. A frontend task
builds the UI on mock/stub data, ASSUMING the API contract; backend tasks come later and
implement that contract. During a frontend task don't wait on backend — stub it. (If you
ever pull a task by ref directly, task get on a locked future phase or the other layer
returns 423 Locked — that work isn't available yet; keep following task next.)
Generated by NgodingPakeAI for AI coding agents. Source of truth: https://www.ngodingpakeai.com.
From the file to a first result
The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.
View the source and supporting filesThis download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.
1. Download the file
Download SKILL.mdFrom the root of a test project, save the file as .skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.
Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.
mkdir -p '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/ngodingpakeai-codebase-sync-mrzxuqyv/download' --output '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md.part' && mv '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md.part' '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md'2. Check prerequisites
Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.
Original excerpt: Prerequisites
- Node.js available (the CLI runs via
npx ngodingpakeai …). - Workspace ID:
<workspace_id> - An access token starting with
ngpk_. Provide it via theNGODINGPAKEAI_TOKENenvironment variable (preferred) or the--tokenflag onconnect. Create one at https://www.ngodingpakeai.com/workspace → "Connect Codebase".
The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.
3. Load the skill
After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.
Claude Code
test -f '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md' && test -s '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/ngodingpakeai' && cp -R '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv' '.claude/skills/ngodingpakeai'Cursor
test -f '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md' && test -s '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md' && mkdir -p '.cursor/skills' && test ! -e '.cursor/skills/ngodingpakeai' && cp -R '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv' '.cursor/skills/ngodingpakeai'Codex
test -f '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md' && test -s '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md' && mkdir -p '.agents/skills' && test ! -e '.agents/skills/ngodingpakeai' && cp -R '.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv' '.agents/skills/ngodingpakeai'OpenSkills
OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.
Official OpenSkills installationopenskills install './.skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv'openskills read 'ngodingpakeai-codebase-sync-mrzxuqyv'Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.
For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.
openskills syncManual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.
4. Try a first task
Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:
Read .skill-downloads/ngodingpakeai-codebase-sync-mrzxuqyv/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.
React Hook Form Best Practices
Development
Master React Hook Form: avoid anti-patterns, manage subscriptions, and handle reset, dirty state, and controlled inputs correctly.
Emotion to Mantine Migration
Development
Migrate Emotion styled-components to Mantine components with style props and CSS modules. Use when converting .styled.tsx files or removing @emotion imports.
Scope Creep Detector
Development
Analyzes git diffs against a stated intent to detect scope creep, unrelated files, broad PRs, and oversized changes, then suggests keep, split, or justify actions.