cm-ai SKILL.md skillA
cm-ai from kingxiaozhe/cm-workflow is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kingxiaozhe/cm-workflow/cm-ai@git:20261026.4512875Pins git:20261026.4512875 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kingxiaozhe/cm-workflow
- Path
skills/cm-ai/SKILL.md- Versions recorded
- 22
- Latest version
- git:20261026.4512875, committed Oct 26, 2026
- First version recorded
- Aug 2, 2026
- Size
- 13,382 bytes
- Repository stars
- 97
- License
- MIT
用户明确说“规格已确认，开始实现”或要求按已审批 CM specs 开发时使用。新任务默认由 JS workflow 驱动 N1-N8，完成开发、独立审查、QA 与文档同步；模糊点子、未审规格和单独一句“继续”不能触发编码批准。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# cm-ai — 自动开发 执行前读取 `../../runtime/project-context.md`、`../../runtime/orchestration.md`、 `../../runtime/task-gates.md`、`../../runtime/review.md` 与 `../../runtime/model-efficiency.md`、`../../runtime/logging.md`。Codex 入口为 `$cm-ai`；Claude Code 跨平台入口为 `/cm-ai`，macOS/Linux 另有历史别名 `/cm:ai`。 用户明确要求外部专家，或为本次开发任务开启 AUTO 时，按 `../../runtime/external-expert.md` 执行 `../external-expert/SKILL.md` 的任务路由。 编码、命令、测试执行、页面 QA、Git 与 N4 永远 LOCAL；AUTO 只能把可分离的复杂 研究、测试设计或方案批判路由到 CONSULT/VERIFY。外部建议由本地应用、测试与裁决， 其 `.external/` 证据不得满足 N4/N5。 `用户本轮输入` — specs 文件夹路径 + 代码项目路径。 ```bash $cm-ai specs在~/projects/my-app-specs，代码在~/code/my-app $cm-ai ~/projects/specs 前端~/code/fe 后端~/code/api ``` ## 流程图 ### 执行路由（新任务默认 JS） 先按下列顺序选择执行方式；用户无需额外说“使用 JS workflow”。路由选择不替代规格审批或实际调用授权。 1. **恢复已有运行**：先读取原运行记录。已有 JS host/batch 沿原身份与配置恢复；已配置 QA 因命令配置错误卡住时，按 `references/js-host-qa-recovery.md` 的“QA 配置修订”显式授权，不重开已完成任务。 已确认的旧兼容任务沿原流程续接，不因升级迁移状态。记录缺失、冲突或无法确定归属时只读核对，不能猜测或另开运行绕过历史。 2. **新任务**：默认只读取 `references/js-host.md`（正常路径）。先明确 control policy v2 的开发、bootstrap、QA 与 QA 修复模式，再由共享 JS 入口驱动阶段；当前会话只执行其工具请求。 …
Read the whole file at its exact version.
How to install
mdr add kingxiaozhe/cm-workflow/cm-ai@sha256:0e46aadefbdd3c33The line at the top of this page pins the label git:20261026.4512875, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_cpy2zry2xk754pbu)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 22 versions of this file, between Aug 2, 2026 and Oct 26, 2026, about one every 4 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261026.4512875 latest | 2026-10-26 | 4512875 | 13,382 B | A | view · diff |
| git:20261026.03bbe5a | 2026-10-26 | 03bbe5a | 13,318 B | A | view · diff |
| git:20261025.4306703 | 2026-10-25 | 4306703 | 12,972 B | A | view · diff |
| git:20261025.316073d | 2026-10-25 | 316073d | 12,873 B | A | view · diff |
| git:20261025.887ffc9 | 2026-10-25 | 887ffc9 | 12,733 B | A | view · diff |
| git:20261023.fc25c82 | 2026-10-23 | fc25c82 | 12,248 B | A | view · diff |
| git:20261021.179c2e8 | 2026-10-21 | 179c2e8 | 11,989 B | A | view · diff |
| git:20261020.8831d84 | 2026-10-20 | 8831d84 | 11,866 B | A | view · diff |
| git:20261012.4cc1fdb | 2026-10-12 | 4cc1fdb | 12,276 B | A | view · diff |
| git:20261012.2912a6a | 2026-10-12 | 2912a6a | 12,174 B | A | view · diff |
| git:20261012.677dba6 | 2026-10-12 | 677dba6 | 12,078 B | A | view · diff |
| git:20261012.80f5f8c | 2026-10-12 | 80f5f8c | 12,077 B | A | view · diff |
| git:20261011.c9b616c | 2026-10-11 | c9b616c | 11,972 B | A | view · diff |
| git:20261009.e170ba3 | 2026-10-09 | e170ba3 | 11,187 B | A | view · diff |
| git:20261009.0f0a71d | 2026-10-09 | 0f0a71d | 10,672 B | A | view · diff |
| git:20261005.31ba0f8 | 2026-10-05 | 31ba0f8 | 9,865 B | A | view · diff |
| git:20260924.056a6a9 | 2026-09-24 | 056a6a9 | 9,803 B | A | view · diff |
| git:20260910.1c99a44 | 2026-09-10 | 1c99a44 | 9,663 B | A | view · diff |
| git:20260909.60f88dd | 2026-09-09 | 60f88dd | 8,902 B | A | view · diff |
| git:20260906.ac01bfb | 2026-09-06 | ac01bfb | 8,100 B | A | view · diff |
| git:20260807.abd1ec3 | 2026-08-07 | abd1ec3 | 8,102 B | A | view · diff |
| git:20260802.f22addf | 2026-08-02 | f22addf | 7,242 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (13382 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kingxiaozhe/cm-workflow · 97 stars · license MIT · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_cpy2zry2xk754pbu GET https://markdownregistry.com/api/v1/resolve?ref=kingxiaozhe/cm-workflow/cm-ai GET https://markdownregistry.com/api/v1/blob/0e46aadefbdd3c334b69032c94693584749ae7a22fc4f3cf30fa7dad720fa346
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.