cm-check skillA
cm-check is agent-read markdown (skill) from kingxiaozhe/cm-workflow: 用户说“检查工作流是否安装正确”“为什么找不到 cm 命令”时使用。默认查询 npm 稳定版，有新版自动升级已管理的 CM 安装，再检查插件、核心 Skills、兼容包装与模板引用；不测试或修改业务代码。.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# cm-check — 双运行时一致性自检
执行前读取 `../../runtime/project-context.md` 与 `../../runtime/logging.md`。Codex 入口为 `$cm-check`；Claude Code 跨平台入口为 `/cm-check`，macOS/Linux 另有历史别名 `/cm:check`。
## 默认先检查更新
从当前 Skill 路径解析 `{CM_WORKFLOW_ROOT}`。每次完整 `cm-check`，在启动检查控制器前执行一次：
```bash
node "{CM_WORKFLOW_ROOT}/scripts/cm-check-update.mjs" \
--skill-dir "{CM_WORKFLOW_ROOT}/skills/cm-check" --runtime codex
```
Claude Code 将 `--runtime` 改为 `claude`。默认发现 npm `latest` 稳定新版就升级，
无需 `--upgrade` 或再问一次；固定包为 `@aibyzero/cm-workflow`，复用现有安装器的
`--yes`、范围限制和失败回滚。只更新 CM 的已管理文件，不安装业务依赖或改业务项目。
当前还有 CM 开发、审查或发布任务在运行时，先完成或暂停该任务，不能并发替换其运行时。
用户明确说“只检查，不升级”时跳过此前置步骤，并注明未查询更新。
按 JSON 结果处理，不把退出码 0 一律解释成最新版：
- `updated`：已升级并回读版本；使用返回的 `workflowRoot`，重新读取其中的本 Skill 和
`references/js-host.md`，直接进入下方检查，不再次运行更新步骤。其他 Skills 在新会话加载。
- `current` / `ahead`：检查返回的管理目录；若当前会话仍引用旧缓存，重新读取该目录的
Skill/接线文档，提醒新开会话。不降级比 npm 更新的版本。
- `offline`：继续当前本地检查，报告“无法确认最新版”；本地 PASSED 不代表版本最新。
- `unmanaged`：源码仓库、Pi/BYZ 或其他管理器安装仅报告本地/远程版本，不改其源码或
改换安装方式；明确说明自动升级未执行，沿用当前根检查。
- `blocked` / 非零退出 / 无有效结果：停止并报告原因，不绕过失败继续宣布通过。
当前自动安装支持 macOS Codex 的个人本地市场安装，以及 macOS/Linux Claude 安装。
Windows 或其他安装方式有新版时，明确提示使用原平台安装器；不伪称已更新。
…Read the whole file at its exact version.
How to install
mdr add kingxiaozhe/cm-workflow/cm-check@git:20260920.38ea993mdr add kingxiaozhe/cm-workflow/cm-check@sha256:004a49b015d13e94Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_vmwehgpkeybwnpql)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260920.38ea993 latest | 2026-09-20 | 38ea993 | 8,890 B | A | view · diff |
| git:20260920.29d187a | 2026-09-20 | 29d187a | 8,282 B | A | view · diff |
| git:20260917.8e7a8ed | 2026-09-17 | 8e7a8ed | 7,462 B | A | view · diff |
| git:20260917.100626f | 2026-09-17 | 100626f | 7,274 B | A | view · diff |
| git:20260916.c144c45 | 2026-09-16 | c144c45 | 6,913 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (8890 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kingxiaozhe/cm-workflow · 29 stars · license MIT · pushed 2026-09-24 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_vmwehgpkeybwnpql GET https://markdownregistry.com/api/v1/resolve?ref=kingxiaozhe/cm-workflow/cm-check GET https://markdownregistry.com/api/v1/blob/004a49b015d13e940c579a85cc6678ee5f9d9121cf2b5e5ec2626e3b7555024a
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.