cm-check SKILL.md skillA
cm-check from kingxiaozhe/cm-workflow is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kingxiaozhe/cm-workflow/cm-check@git:20261027.cf6a69fPins git:20261027.cf6a69f in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kingxiaozhe/cm-workflow
- Path
skills/cm-check/SKILL.md- Versions recorded
- 14
- Latest version
- git:20261027.cf6a69f, committed Oct 27, 2026
- First version recorded
- Sep 16, 2026
- Size
- 10,192 bytes
- Repository stars
- 97
- License
- MIT
用户说“检查工作流是否安装正确”“为什么找不到 cm 命令”时使用。默认查询 npm 稳定版，有新版自动升级已管理的 CM 安装，再检查插件、核心 Skills、兼容包装与模板引用；不测试或修改业务代码。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# cm-check — 双运行时一致性自检
执行前读取 `../../runtime/project-context.md` 与 `../../runtime/logging.md`。Codex 入口为 `$cm-check`；Claude Code 跨平台入口为 `/cm-check`，macOS/Linux 另有历史别名 `/cm:check`。
## 默认先检查更新
从当前 Skill 路径解析 `{CM_WORKFLOW_ROOT}`。每次完整 `cm-check`，在启动检查控制器前执行一次：
```bash
node "{CM_WORKFLOW_ROOT}/scripts/cm-check-update.mjs" \
--skill-dir "{CM_WORKFLOW_ROOT}/skills/cm-check" --runtime codex
```
Claude Code 将 `--runtime` 改为 `claude`。默认发现 npm `latest` 稳定新版就升级，
无需 `--upgrade` 或再问一次；固定包为 `@aibyzero/cm-workflow`，复用现有安装器的
`--yes`、范围限制和失败回滚。只更新 CM 的已管理文件，不安装业务依赖或改业务项目。
当前还有 CM 开发、审查或发布任务在运行时，先完成或暂停该任务，不能并发替换其运行时。
用户明确说“只检查，不升级”时跳过此前置步骤，并注明未查询更新。
按 JSON 结果处理，不把退出码 0 一律解释成最新版：
- `updated`：已升级并回读版本；使用返回的 `workflowRoot`，重新读取其中的本 Skill 和
`references/js-host.md`，直接进入下方检查，不再次运行更新步骤。其他 Skills 在新会话加载。
- `current` / `ahead`：检查返回的管理目录；若当前会话仍引用旧缓存，重新读取该目录的
Skill/接线文档，提醒新开会话。不降级比 npm 更新的版本。
- `offline`：继续当前本地检查，报告“无法确认最新版”；本地 PASSED 不代表版本最新。
- `unmanaged`：源码仓库、Pi/BYZ 或其他管理器安装仅报告本地/远程版本，不改其源码或
改换安装方式；明确说明自动升级未执行，沿用当前根检查。
- `blocked` / 非零退出 / 无有效结果：停止并报告原因，不绕过失败继续宣布通过。
当前自动安装支持 macOS Codex 的个人本地市场安装，以及 macOS/Linux Claude 安装。
Windows 或其他安装方式有新版时，明确提示使用原平台安装器；不伪称已更新。
…Read the whole file at its exact version.
How to install
mdr add kingxiaozhe/cm-workflow/cm-check@sha256:660cb1adec269b55The line at the top of this page pins the label git:20261027.cf6a69f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_vmwehgpkeybwnpql)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 14 versions of this file, between Sep 16, 2026 and Oct 27, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261027.cf6a69f latest | 2026-10-27 | cf6a69f | 10,192 B | A | view · diff |
| git:20261027.258f422 | 2026-10-27 | 258f422 | 10,006 B | A | view · diff |
| git:20261026.b66d27e | 2026-10-26 | b66d27e | 9,988 B | A | view · diff |
| git:20261026.d7bd368 | 2026-10-26 | d7bd368 | 10,006 B | A | view · diff |
| git:20261024.7f31db3 | 2026-10-24 | 7f31db3 | 9,874 B | A | view · diff |
| git:20261024.e90c87d | 2026-10-24 | e90c87d | 9,684 B | A | view · diff |
| git:20261021.179c2e8 | 2026-10-21 | 179c2e8 | 9,402 B | A | view · diff |
| git:20261010.2db5275 | 2026-10-10 | 2db5275 | 9,333 B | A | view · diff |
| git:20260928.bd791c4 | 2026-09-28 | bd791c4 | 9,303 B | A | view · diff |
| git:20260920.38ea993 | 2026-09-20 | 38ea993 | 8,890 B | A | view · diff |
| git:20260920.29d187a | 2026-09-20 | 29d187a | 8,282 B | A | view · diff |
| git:20260917.8e7a8ed | 2026-09-17 | 8e7a8ed | 7,462 B | A | view · diff |
| git:20260917.100626f | 2026-09-17 | 100626f | 7,274 B | A | view · diff |
| git:20260916.c144c45 | 2026-09-16 | c144c45 | 6,913 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10192 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kingxiaozhe/cm-workflow · 97 stars · license MIT · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_vmwehgpkeybwnpql GET https://markdownregistry.com/api/v1/resolve?ref=kingxiaozhe/cm-workflow/cm-check GET https://markdownregistry.com/api/v1/blob/660cb1adec269b5525281d9fa37f134613f67b1ba1588ccf49901db27ac58b1f
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.