cm-idea SKILL.md skillA
cm-idea from kingxiaozhe/cm-workflow is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kingxiaozhe/cm-workflow/cm-idea@git:20261021.179c2e8Pins git:20261021.179c2e8 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kingxiaozhe/cm-workflow
- Path
skills/cm-idea/SKILL.md- Versions recorded
- 6
- Latest version
- git:20261021.179c2e8, committed Oct 21, 2026
- First version recorded
- Jul 29, 2026
- Size
- 3,397 bytes
- Repository stars
- 97
- License
- MIT
用户说“我有个点子”“帮我梳理产品”或需要先聊清目标时使用。通过逐题访谈整理为可交给 cm-prd 的 PRD；已有明确需求文档时改用 cm-prd，不写代码、不拆开发任务。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# cm-idea — 点子 → PRD（流程上游入口，非 N1–N8 步骤）
先读取 `../../runtime/project-context.md`。Codex 入口为 `$cm-idea`；Claude Code 跨平台入口为 `/cm-idea`，macOS/Linux 另有历史别名 `/cm:idea`。
用户明确要求外部专家，或为本次访谈开启 AUTO 时，先读取
`../../runtime/external-expert.md` 并执行 `../external-expert/SKILL.md` 的任务路由。
AUTO 只在复杂方案/材料综合时 CONSULT，需要权威事实时 VERIFY，其余 LOCAL。外部
结果只作为访谈输入，不能替用户确认产品方向；没有明确请求，也没有本次 AUTO 授权
时，保持原来的纯对话、不联网流程。
**用法**：`$cm-idea 一句话点子`（如 `$cm-idea 我想做个帮宝妈记录辅食的小程序`）
## JS 只读准入
在加载访谈引用、联网或探测保存目录之前，先执行：
```bash
node "{CM_WORKFLOW_ROOT}/scripts/cm-idea-entry.mjs" \
--skill-dir "{CM_WORKFLOW_ROOT}/skills/cm-idea"
```
只有 `ready / interview` 才继续加载下方引用。该结果不读取或回显点子内容，不调用外部专家，
也不授权保存文件；保存前仍必须按访谈引用取得用户对完整路径的确认。JS宿主管理轮次和保存，
`references/idea-to-prd.md` 继续是访谈规则唯一事实源。
把模糊想法聊成成熟 PRD 的产品访谈搭档。**本命令只做一件事**：加载 `references/idea-to-prd.md` 并严格按其规则执行——本文件不复制不改写访谈规则，该引用文件是唯一事实源。
## 执行
1. 读取 `references/idea-to-prd.md`，缺失则提示重装最新包后中止
2. 按 [当前会话接线](references/js-host.md) 启动JS宿主，把用户实际输入送入访谈；判定类型、一次一题、L1骨架和按需加深仍遵循原引用，交易/Web3先读领域包
3. 全程遵守技能自身纪律（一次一题、防诱导选项、狠收敛、纯对话不联网）
## 与 cm 流程的衔接（只提示，不自动执行）
只有JS返回 saved 且文件已回读，才追加下面的“已保存”提示；未保存则如实报告草稿状态，不伪造路径或自动代跑后续命令：
```text
…Read the whole file at its exact version.
How to install
mdr add kingxiaozhe/cm-workflow/cm-idea@sha256:723f285c5aa4fa50The line at the top of this page pins the label git:20261021.179c2e8, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_a3qfp3gzn5rggl7z)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Jul 29, 2026 and Oct 21, 2026, about one every 17 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261021.179c2e8 latest | 2026-10-21 | 179c2e8 | 3,397 B | A | view · diff |
| git:20260918.eae0cf7 | 2026-09-18 | eae0cf7 | 3,329 B | A | view · diff |
| git:20260909.60f88dd | 2026-09-09 | 60f88dd | 3,206 B | A | view · diff |
| git:20260906.ac01bfb | 2026-09-06 | ac01bfb | 3,174 B | A | view · diff |
| git:20260730.bdbd28e | 2026-07-30 | bdbd28e | 2,640 B | A | view · diff |
| git:20260729.737ae57 | 2026-07-29 | 737ae57 | 2,630 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3397 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kingxiaozhe/cm-workflow · 97 stars · license MIT · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_a3qfp3gzn5rggl7z GET https://markdownregistry.com/api/v1/resolve?ref=kingxiaozhe/cm-workflow/cm-idea GET https://markdownregistry.com/api/v1/blob/723f285c5aa4fa50119614c9c0b8e8c15df074f6360a19426afeeff7c044ab2e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.