namba-ai: Skill for Claude Code

.agents/skills/namba-run/SKILL.md

namba-run is a skill for Claude Code, Codex from Nam-Cheol/namba-ai. It costs 19 tokens per session (1,147 once invoked), scanned A, original, MIT.

A command-style skill for executing a SPEC package through the Namba workflow. A SPEC package is a set of files that describes work to be carried out.

In plain words
What is it for?
Use it to run Namba SPEC packages, inspect or probe them safely, and report changed artifacts, validation results, or blockers.
Why use it?
It keeps the command's scope, state changes, validation, and evidence explicit while the workflow runs.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: installed under .agents/ (shared by several agents); mentions Codex; $skill-name invocation.

This is Nam-Cheol/namba-ai's own configuration. It tells Claude Code and Codex how to work on namba-ai itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything namba-ai configures →

Reuse

Borrowing it

Nothing to install: this file belongs to Nam-Cheol/namba-ai. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Nam-Cheol/namba-ai/main/.agents/skills/namba-run/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/Nam-Cheol/namba-ai

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for namba-run

README.md
[![agentmods](https://agentmods.dev/badge/skills/nam-cheol/namba-ai/namba-run/github.svg)](https://agentmods.dev/skills/nam-cheol/namba-ai/namba-run)
Your own site
<a href="https://agentmods.dev/skills/nam-cheol/namba-ai/namba-run"><img src="https://agentmods.dev/badge/skills/nam-cheol/namba-ai/namba-run/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for namba-run

Your own site · 80×15
<a href="https://agentmods.dev/skills/nam-cheol/namba-ai/namba-run"><img src="https://agentmods.dev/badge/skills/nam-cheol/namba-ai/namba-run.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 19 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,147 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00019 $0.01147
Opus 5 $0.00010 $0.00574
Sonnet 5 $0.00004 $0.00229
Haiku 4.5 $0.00002 $0.00115

Measured 10d ago against content hash 92f75192d9e3, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

namba-run scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/namba-run/SKILL.md · 38 lines

How it starts

The opening of the file, as written. The whole thing — 38 lines — stays where its author put it; the contents beside it link to each section on GitHub.

State effect: mutating workflow entry point. Use help/probe paths read-only, and otherwise expect repository state or GitHub state to change.

Generated instruction contract for this command skill:

  • Purpose: keep the role or command scope explicit, bounded, and testable.
  • Boundary: honor read-only versus mutating state effects, configured sandbox mode, and assigned file or workflow ownership.
  • Required output: report concrete actions, changed paths or artifacts, validation evidence, and pass/fail status or blockers.
  • Pass/fail criteria: claim success only when acceptance criteria and configured validation are satisfied; otherwise name the exact blocker and impact.
  • Evidence expectations: cite source artifacts such as SPEC files, .namba/ configs, diffs, test output, PR/check links, or generated manifests instead of relying on unsupported assertions.
  • Security responsibilities: never expose or commit secrets; treat auth, privacy, destructive commands, permission changes, and external network or credential use as security-sensitive.
  • Destructive command and escalation policy: do not run destructive commands unless explicitly requested; request approval for privileged, networked, or sandbox-blocked actions only when the active approval mode allows it, and otherwise report the blocker or use a safe non-escalating path.
  • Fallback implementer boundary: if a specialist path is unavailable and the main/default implementer takes over, stay within the assigned scope and preserve the same evidence and validation duties.
  • Portability: keep durable guidance non-project-specific unless the current repository config or SPEC explicitly provides the project detail.

Use this skill when the user explicitly says $namba-run, namba run SPEC-XXX, or asks to execute a SPEC through Namba.

Behavior:

  • Read .namba/specs/<SPEC>/spec.md, plan.md, and acceptance.md before implementation.
  • Read .namba/specs/<SPEC>/reviews/readiness.md when it exists so advisory review depth is visible before coding starts.
  • Read .namba/specs/<SPEC>/frontend-brief.md when it exists; it is the canonical source for frontend task classification and gate state.
  • In an interactive Codex session, prefer Codex-native in-session execution over recursively calling namba run.
  • Only use the standalone CLI runner for --solo, --team, --parallel, --dry-run, or when the user explicitly wants the non-interactive runner path.
  • For --solo, stay inside one runner unless one domain clearly dominates and a single specialist would materially reduce risk.
  • For --team, prefer one specialist when one domain dominates, expand to two or three only when acceptance spans multiple domains, and keep one integrator plus final validation owner in the workspace.
  • For --team, honor each selected role's model and model_reasoning_effort metadata from .codex/agents/*.toml so planner/reviewer/security roles can think harder without making every delivery role heavy.
  • Route art direction, palette/tone logic, composition, motion intent, Figma critique, and generic-section redesign work to namba-designer; route component boundaries, state ownership, and UI delivery planning to namba-frontend-architect; route approved UI implementation to namba-frontend-implementer; route mobile-specific UI delivery to namba-mobile-engineer; route API, schema, and pipeline work to backend/data; route auth, secrets, and compliance work to security; route deployment and runtime work to devops.
  • frontend-major work must not move into architecture or implementation until frontend-brief.md shows coherent problem, reference, critique, decision, prototype evidence, a complete Do-Not Design Contract with reference-driven asset manifest, generated-image decision fields, generation plan, and aligned design clearance; frontend-minor keeps the lightweight advisory path.
  • Treat review readiness as advisory by default for non-frontend and frontend-minor work, but block explicit frontend-major execution when the frontend brief is missing required evidence, internally contradictory, mismatched with design-review summaries, or missing/insufficient negative-first contract evidence.
  • For frontend-major, first frontend and first major screen phases default to Asset mode: generated-images and Imagegen requirement: required; accept existing-assets or not-applicable only with validator-readable Asset decision proof.
  • For frontend-major implementation results, require a Do-Not Design Violation Check that cites changed files, names any banned pattern found, and cites the exception path when one is used; when Imagegen requirement: required is present, require Generated Asset Evidence with manifest path and repeatable Asset ID blocks containing generated file, saved asset path, prompt summary, intended UI usage, and rendered usage evidence.
  • For browser-rendered frontend work, use managed server lifecycle, wait for rendered DOM state, capture screenshots, inspect console errors, and prefer Playwright checks when the surface runs in a browser.
  • Run validation commands from .namba/config/sections/quality.yaml and finish with namba sync. Use namba pr and namba land for the GitHub handoff and merge cycle instead of overloading sync.
  • Collaboration defaults: branch from main, open the PR into main, write the PR in Korean, and request Codex review only when namba pr --review or queue --review is explicit; use @codex review as the request command.

Read the full file on GitHub · 38 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 38 lines · 19 tokens per session scan A 92f75192d9e3

Subscribe to this mod's changes

namba-run is a skill published in the GitHub repository Nam-Cheol/namba-ai (11 stars, last pushed 18d ago), licensed MIT. It adds 19 tokens to every session and 1,147 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

agf

Find local coding-agent sessions, inspect bounded metadata or summaries, and prepare a read-only resume plan with AGF. Use for finding prior work across agent CLIs, not for executing agents, deleting sessions, or reading full transcripts.

subinium/agf · 49 tokens

dynamic-resources

Example skill loaded from resourcesdiscover.

Wholiver/metis · 11 tokens

repo-hygiene

Use when the scheduled repo-hygiene workflow runs from GitHub Actions (or an operator dry-run) to scan the repository for small, certain docs/test/code hygiene issues and fix them as one batched branch.

QwenLM/qwen-code · 48 tokens

find-simplifications

Use for a periodic repo-wide sweep of qwen-code for accumulated excess surface — dead components and files, orphaned locale keys, exports nothing consumes, added-then-removed scaffolding — filing candidates on a tracking issue and landing only what a maintainer has said yes to. Repo-wide and evidence-first; every…

QwenLM/qwen-code · 103 tokens

swarm-pr-review

Run a graph-guided, tool-augmented PR review using context packing, parallel exploration, mandatory repository-agnostic risk-family coverage with dispatch scaled to diff size and risk, independent reviewer validation, critic challenge, and metrics writeback. Use for deep pull request review with low false-positive…

ZaxbyHub/opencode-swarm · 91 tokens

bundle-safety

Bundle transform safety — minification variant selection, consumer-constraint verification, identifier preservation, and namespace re-export coverage for build output.

ZaxbyHub/opencode-swarm · 30 tokens