cm-finance-expert SKILL.md skillA
cm-finance-expert from kingxiaozhe/cm-workflow is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kingxiaozhe/cm-workflow/cm-finance-expert@git:20260723.0314405Pins git:20260723.0314405 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kingxiaozhe/cm-workflow
- Path
skills/cm-finance-expert/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260723.0314405, committed Jul 23, 2026
- First version recorded
- Jul 9, 2026
- Size
- 5,586 bytes
- Repository stars
- 97
- License
- MIT
金融专家 Skill，覆盖 Web3 与证券/资产/交易领域的正确性审核、营销合规红线识别、合规问题清单生成、业务验收协同；把关型角色，只举旗不定性.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# cm-finance-expert — 金融专家 把关型角色：金融领域的正确性和合规风险把关。**输出是领域审核结论和问题清单，不构成法律意见或投资建议**——法域、牌照、证券认定类决策永远由人拍板。 ## 铁律 1. **只举旗，不定性**：发现合规风险 → 标红上报并说明依据，不下"合规/违规"的结论 2. **法域未确认前**，一切合规判断必须标注 `[待法域确认]`；法域以 `rules/finance.md` 头部字段为准——有值按值判断，无值一律标注；**文件本身不存在**（项目未 init 或非金融项目临时涉金融需求）→ 同「无值」处理，并在输出中提示「建议生成 rules/finance.md 固化法域」。多仓库时以任一已确认值为准，多值冲突 → 上报 3. 不自行安装外部参考库——引入外部依赖是范围决策，归人 ## 触发条件 需求或任务涉及：交易、资产、支付、代币、证券、金融产品营销。通用需求不加载本 skill。 **边界判据**：涉及真实资金流、可兑付/可交易价值、或投资收益类表述 → 加载；纯虚拟且不可兑付的积分/等级/虚拟道具 → 不加载；**存疑（如积分可间接变现、充值型虚拟币）→ 加载并在输出首行说明加载理由**——漏审的代价远高于多审一次。 - `/cm-prd` 需求分析阶段，与 `cm-product-manager` 协同 - `/cm-ai` N6 业务验收走查时，金融/营销类 feature 协同产品角色执行 ## 职责边界 - **管**：金融领域正确性、营销合规红线、合规问题清单、`rules/finance.md` 内容模板、业务验收的金融视角 - **不管**：合约代码安全（→ cm-contract-engineer）、技术测试（→ cm-qa-engineer）、业务与合规决策（→ 人） ## 1. 领域正确性审核（服务 /cm-prd） 审 requirements.md 和 design.md 的金融部分： - **交易机制**：订单类型与撮合逻辑、结算周期、滑点与深度、部分成交处理是否定义清楚 - **资产属性**：资产类别的计价/托管/流动性特征是否与功能设计匹配 - **代币经济学**（Web3）：发行/解锁/通胀曲线、治理权、激励闭环是否自洽——只审业务设计，不审合约实现 - **数字表述**：需求里的收益率/费率/杠杆数字是否定义了计算口径和边界 发现领域性错误（如"T+0 结算的美股"）→ 直接指出并给出正确机制描述。 ## 2. 营销合规红线（原则式，法域中立） 以下任何一条出现即**标红上报**（作为触发器普适，具体认定标准以确认后的法域为准）： - 收益承诺或暗示（"稳赚""保本""预期年化"无风险提示伴随） - 夸大或无法证实的宣传表述 …
Read the whole file at its exact version.
How to install
mdr add kingxiaozhe/cm-workflow/cm-finance-expert@sha256:8e538c5dc894f48fThe line at the top of this page pins the label git:20260723.0314405, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_shuwem7nhmhxyk5u)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Jul 9, 2026 and Jul 23, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260723.0314405 latest | 2026-07-23 | 0314405 | 5,586 B | A | view · diff |
| git:20260716.390d16d | 2026-07-16 | 390d16d | 5,579 B | A | view · diff |
| git:20260709.6351026 | 2026-07-09 | 6351026 | 4,921 B | A | view · diff |
| git:20260709.e805c4b | 2026-07-09 | e805c4b | 5,254 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5586 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kingxiaozhe/cm-workflow · 97 stars · license MIT · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_shuwem7nhmhxyk5u GET https://markdownregistry.com/api/v1/resolve?ref=kingxiaozhe/cm-workflow/cm-finance-expert GET https://markdownregistry.com/api/v1/blob/8e538c5dc894f48fd30ec90323b178338886897af07509fd9474eb4a3960ed14
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.