SkillAgentSearch skills...

cm-how-it-work

Complete guide to vibe coding with the CodyMaster skill kit — from idea to deploy. Covers the full workflow, skills used at each phase, and common use cases. Read this first if you are new; reference it whenever you're unsure which skill to invoke.

Install / Use

npx skills add tody-agent/codymaster --skill cm-how-it-work

Installs into whichever agent you are using.

About this skill
📄

SKILL.md

Installable skill definition

Quality Score

65/100

Category

Automation

Supported Platforms

Sourcegraph Cody

Tags

Our assessment of cm-how-it-work

cm-how-it-work scores 65/100 on our quality scale, 2710th of 2,883 Automation skills we index.

Its SKILL.md is 10 KB long, well organised into 25 sections with 1 code example: a thorough specification that gives an agent plenty to work with.

It has no GitHub stars yet, so there is no community track record; judge it on its content.

Substance
29/30
Structure
17/20
Description
15/15
Adoption
0/20
Freshness
5/15

Maintenance, license and trust

  • We could not determine when the repository was last updated.
  • No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
  • Its trust signals score 68/100, with 3 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.

Safety scan

No issues found

Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands.

Automated pattern scan on 2026-10-26. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.

cm-how-it-work compared with similar skills

All 4 of these similar skills score higher than cm-how-it-work; compare them before choosing.

SkillScoreStarsUpdatedFormat
cm-how-it-work (this skill)by tody-agent650—SKILL.md
Agent-Reachby Panniantong100103.3k1d agoCLAUDE.md
Scraplingby D4Vinci10089.9ktodayMCP Server
rufloby ruvnet10079.5ktodayMCP Server
algorithmic-artby anthropics100177.9k34d agoSKILL.md

Frequently asked questions

How do I install cm-how-it-work?
Run npx skills add tody-agent/codymaster --skill cm-how-it-work. The install tabs above show the steps for each supported agent.
Which AI agents does cm-how-it-work work with?
It is written for Sourcegraph Cody, as a SKILL.md file. Other agents that read the same format can often use it too.
Is cm-how-it-work safe to use?
Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. It declares no license and scores 68/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
Is cm-how-it-work still maintained?
We could not determine when the repository was last updated.

name: cm-how-it-work description: "Complete guide to vibe coding with the CodyMaster skill kit — from idea to deploy. Covers the full workflow, skills used at each phase, and common use cases. Read this first if you are new; reference it whenever you're unsure which skill to invoke."

CodyMaster Kit — The Ultimate Vibe Coding Guide

Overview

The CodyMaster (CM) kit transforms ideas into production code through 13 specialized, optimized skills. This workflow ensures the highest quality, absolute security, and maximum execution speed.

💡 Idea → 🔍 Analysis → 📐 Design → 🧪 Test-first (TDD) → 💻 Code → ✅ Verify → 🚀 Deploy → 🔄 Iterate

Workflow

Phase 0: Identity & Safety 🔒

Rule #1: Always verify identity before performing any action that could change the project state.

  • Skill: cm-identity-guard
  • When: At the start of a work session, before git push, deploy, or database operations.
  • Action: Run node check-identity.js (or similar script) to verify GitHub/Cloudflare/Supabase accounts.

Phase 0.3: Knowledge Infrastructure Setup 🧠

For large codebases, establish the memory foundation before planning.

  • Skills: cm-codeintell + cm-dockit + cm-deep-search + cm-notebooklm
  • When: When onboarding to a new codebase or starting a massive refactoring initiative.
  • Action:
    1. Scan structure with cm-codeintell to build the Skeleton Index.
    2. Generate missing architectural docs with cm-dockit.
    3. Index the docs for fast local retrieval with cm-deep-search (qmd).
    4. Sync high-value patterns to the Cloud Brain with cm-notebooklm.
  • Output: A fully indexed 5-tier memory ecosystem ready for precise, low-token AI problem solving.

Phase 0.5: Strategic Analysis 🔍

For complex initiatives and enhancements on existing products.

  • Skills: cm-brainstorm-idea + cm-codeintell
  • When: When the task is complex and requires multi-dimensional analysis (tech, product, design, business) before planning.
  • Action:
    1. Scan codebase with code intelligence (AST graph + architecture diagram via cm-codeintell).
    2. Interview user and analyze with 9 Windows (TRIZ).
    3. Propose 2-3 options, evaluate multi-dimensionally, recommend the best option.
  • Output: OpenSpec openspec/changes/[initiative]/proposal.md — qualified problem + recommended option → passes to cm-planning.

Phase 1: Planning & Design 📐

Understand the 'Job to be Done' (JTBD) and architecture before writing code.

  • Skill: cm-planning (Combines brainstorming + writing-plans)
  • Action:
    1. Brainstorm requirements and analyze i18n.
    2. Propose architecture and tech stack.
    3. Write detailed OpenSpec docs (openspec/changes/[init]/design.md and tasks.md).
  • Output: Design docs and execution plan (OpenSpec tasks) approved by user.

Phase 2: Implementation (TDD & Execution) 💻

Turn the plan into actual source code safely.

  • Skills:
    • cm-tdd: Red-Green-Refactor cycle. No production code without a failing test first.
    • cm-execution: Execute plans intelligently (Manual, Parallel, or Subagent mode).
    • cm-project-bootstrap: For new projects — setup repo, i18n, SEO, and deploy pipeline from Day 0.
    • cm-git-worktrees: Isolate different work items to avoid state mixing.

Phase 3: Quality Control & Verification ✅

Prove with evidence, not words.

  • Skills:
    • cm-quality-gate: Setup test infrastructure (test:gate) and verify output before claiming "done".
    • cm-debugging: When tests fail, use systematic investigation framework to find root cause.
    • cm-code-review: Professional request and feedback review process.

Phase 4: Safe Deployment 🚀

Ship code without fear of incidents.

  • Skills:
    • cm-safe-deploy: Run 8-gate pipeline (Secret → Syntax → Test → Build → Deploy → Smoke).
    • cm-safe-i18n: Translate and synchronize languages consistently across the entire project.
    • cm-terminal: Monitor all terminal commands to detect errors immediately.

CodyMaster Kit — 34 Skills Summary

🔧 Engineering

| Skill | Primary Function | |-------|-----------------| | cm-tdd | Strict Red-Green-Refactor TDD — no code without failing test first. | | cm-debugging | Systematic 5-phase error investigation (root cause first). | | cm-quality-gate | 6-gate verification: static analysis → blind review → ship. | | cm-test-gate | Setup 4-layer test infrastructure (unit → integration → e2e → security). | | cm-code-review | Manage PR lifecycle: request → receive feedback → complete branch. | | cm-codeintell | AST knowledge graph + architecture diagrams + smart context (30% fewer tokens). |

⚙️ Operations

| Skill | Primary Function | |-------|-----------------| | cm-safe-deploy | Multi-gate deploy pipeline with rollback strategy. | | cm-identity-guard | Verify account before push/deploy to prevent wrong-project incidents. | | cm-git-worktrees | Isolate feature work in separate worktrees — no state mixing. | | cm-terminal | Safe terminal execution with progress logging and error capture. | | cm-secret-shield | Defense-in-depth: pre-commit hooks, repo scanning, token lifecycle. | | cm-safe-i18n | Safe multi-language management with multi-pass batching and 8-gate audit. |

🎨 Product

| Skill | Primary Function | |-------|-----------------| | cm-project-bootstrap | Full project setup: design system → CI → staging → deploy from Day 0. | | cm-brainstorm-idea | Strategic analysis gate: 9 Windows + Double Diamond → 2-3 qualified options. | | cm-planning | Brainstorm intent → write implementation plan → coordinate execution. | | cm-ux-master | 48 UX Laws + 37 Design Tests + Figma/Stitch + BM25 semantic design search. | | cm-ui-preview | Live UI concept generation via Google Stitch or Pencil MCP. | | cm-dockit | Generate complete knowledge bases, SOPs, and API docs from codebase. | | cm-readit | Web audio engine: TTS reader, MP3 audio player, Voice CRO trigger system. | | cm-jtbd | JTBD customer discovery: Switch Interview → Canvas → Opportunity Scoring. |

📈 Growth

| Skill | Primary Function | |-------|-----------------| | cm-content-factory | Self-learning content engine: research → generate → audit → deploy. | | cm-ads-tracker | Conversion tracking setup: GTM, Meta CAPI, TikTok, Google Ads. | | cm-cro-methodology | CRO audit: funnel mapping → persuasion assets → A/B test design. |

🎯 Orchestration

| Skill | Primary Function | |-------|-----------------| | cm-execution | Execute plans: Manual / Parallel / Subagent / RARV batch modes. | | cm-continuity | Working memory protocol: read at session start, update at session end. | | cm-skill-mastery | Meta-skill: when to invoke which skill, how to create new skills. | | cm-skill-chain | Compose skills into automated multi-step pipelines (5 built-in chains). | | cm-skill-index | Progressive disclosure index — 90% token savings on skill discovery. | | cm-deep-search | Semantic search via qmd for large codebases (>200 src / >50 docs files). | | cm-notebooklm | Cloud Brain sync — cross-machine knowledge persistence via NotebookLM. | | cm-how-it-work | Full vibe coding guide — phases, skills per phase, use cases. |

🖥️ Workflow Commands

| Skill | Primary Function | |-------|-----------------| | cm-start | Orchestrate full workflow from objective to production code. | | cm-dashboard | Render Kanban board from cm-tasks.json — visual status overview. | | cm-status | Ultra-concise 1-2 sentence progress summary (what's done, what's next). |

🚀 Autonomous Workflow System

The kit supports autonomous mode by applying the Reason → Act → Reflect → Verify (RARV) loop.

How to Use the Workflow:

  1. /cm-start [objective]: Start work. The system will automatically initialize the OpenSpec structure (openspec/changes/[objective]/), break down tasks into tasks.md and sync with cm-tasks.json, launch the tracking interface, and autonomously use CM skills to complete them.
  2. /cm-dashboard: Open the visual tracking Dashboard in browser (shows Kanban board, reasoning log, and progress).
  3. /cm-status: View quick progress summary in Terminal.

💡 Activation Guide by Use Cases

There are 2 ways to use CodyMaster: Fully autonomous (Via Workflows) or Manual skill activation (Via Prompting).

1. Build New Feature / New Project (Autonomous)

Best way to delegate complete work packages.

  • Command: /cm-start "Build user management feature with list screen and CRUD form"
  • Implicit flow: Planning → create Task JSON → sub-agents continuously run cm-tdd and cm-quality-gate for each task until done.

2. Fix Production Bug (Manual)

Bugs need close supervision and AI should not blindly change too much code.

  • Step 1: Activate cm-debugging to find Root Cause.
  • Step 2: Activate cm-tdd to write test reproducing the bug and fix it.
  • Step 3: Activate cm-safe-deploy to ship code safely.

3. Setup New Project From Scratch

Establish a solid foundation to avoid technical debt later.

  • Command: "Use cm-identity-guard to ensure correct account, then run cm-project-bootstrap to setup a new Next.js project."

4. Batch Multi-Language Translation

Tedious work that's error-prone if AI loses focus.

  • Command: "Use cm-safe-i18n to extract all hardcoded text in /components directory to vi.json and en.json files."

9 Golden Rules

  1. Identity First: Verify account (cm-identity-guard) before push/deploy.
  2. Design Before Code: Always have an approved plan before typing.
  3. i18n Day 0: Always consider multi-language from the brainstorm step.
  4. Test Before Code: RED → GREEN → REFACTOR. No exceptions (cm-tdd).
  5. Evidence Over Claims: Only trust terminal/test results output, not AI "saying" it's done.
  6. Deploy via Gates: 8 gates must pass sequentially. Any gate fails = STOP (cm-safe-deploy).
  7. Safe Secrets: Never commit secrets. Pre-commit hooks protect every push (cm-secret-shield).
  8. Parallel Power: Use parallel execution for i18n or multi-bug fixes (cm-execution).
  9. Working Memory: Read CONTINUITY.md at session start, update at session end (cm-continuity).

Related Skills

View on GitHub
GitHub Stars0
CategoryAutomation
UpdatedNaNy ago
Forks0

Trust signals

68/100

From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.

2 medium1 low