Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Cm Runtime

ASecurity

用户要查看或切换 CM 自动派发偏好、单/双 AI 声明、谁写谁审,或修改用户级运行时默认时使用。只管理运行时声明,不安装工具、不测试配额、不接管正在运行的任务。

2 stars
0 votes
0 copies
0 views
Added 9/21/2026
developmentbashnode

Works with

claude codecli

Security Analysis

A100/100

Scanned 9/21/2026

Install to Claude Code

$npx -y skills add kingxiaozhe/cm-workflow --skill cm-runtime --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Cm Runtime?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Cm Runtime
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/kingxiaozhe-cm-runtime/badge)](https://www.skillsdirectory.com/skills/kingxiaozhe-cm-runtime)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: cm-runtime
description: 用户要查看或切换 CM 自动派发偏好、单/双 AI 声明、谁写谁审,或修改用户级运行时默认时使用。只管理运行时声明,不安装工具、不测试配额、不接管正在运行的任务。
---

# cm-runtime — 运行时声明

执行前读取 `../../runtime/project-context.md`、`../../runtime/workflow-config.md` 与
`../../runtime/logging.md`。Codex 入口 `$cm-runtime`;Claude Code 入口 `/cm-runtime`,
macOS/Linux 兼容别名 `/cm:runtime`。这是独立配置工具,不进入 N1–N8,不创建业务任务。

从当前 Skill 目录解析 `{CM_WORKFLOW_ROOT}`。无参数调用时,不直接启动依赖 TTY 的脚本;
由当前会话用 AskUserQuestion 或纯文本完成以下三问。使用**用户当前对话语言**,
中文对话用中文、英文对话用英文,编号、含义与终端一致;文案以
`../../scripts/cm-runtime-i18n.mjs` 为准,预设名与机器字段不翻译。

1. 改哪一层?/ Which scope? `[1] 当前项目 / Current project`(显示检测到的配置路径)
   `[2] 用户级默认 / User default`(`~/.cm-workflow/runtimes.yml`)。有项目配置默认 1,
   无配置默认 2;无配置仍选 1 时,提示将从模板新建 `.cm-workflow.yml`。
2. 你手上有哪个 AI 工具?/ Which AI tools do you have?
   `[1] 只有 Codex / Codex only` `[2] 只有 Claude / Claude only` `[3] 两个都有 / Both`。
   此问无默认,必须选择;选 3 再问:谁写代码?/ Who writes code?
   `[1] Codex(Claude 审,推荐)/ Codex (Claude reviews, recommended)`
   `[2] Claude(Codex 审)/ Claude (Codex reviews)`,默认 1。
3. 显示目标路径、将写入的预设与当前值(如已有),询问确认 / Confirm? `[Y/n]`。
   用户确认后才执行对应 `set`,成功后执行 `show --project "{代码项目路径}"` 并回显。

工具选 1/2 分别映射 `codex-only`/`claude-only`;两个都有、写代码选 1/2 分别映射
`codex-codes`/`claude-codes`。取消、拒绝确认或必选问题连续三次空输入时放弃,不写。
会话没有回复不代表回车或确认,不得因等待超时执行。用户范围用 `set --user`,项目范围用
`set <preset> --project`;用户声明被项目覆盖时如实报告 `show` 的有效来源。

显式自然语言“看看配置”映射 `show`。带 `show` / `set` / `unset` 参数直接执行,
修改意图缺少预设/范围时只补问缺失项。执行示例:

```bash
node "{CM_WORKFLOW_ROOT}/scripts/cm-runtime.mjs" show --project "{代码项目路径}"
node "{CM_WORKFLOW_ROOT}/scripts/cm-runtime.mjs" set codex-codes --project "{代码项目路径}"
node "{CM_WORKFLOW_ROOT}/scripts/cm-runtime.mjs" set --user claude-codes
node "{CM_WORKFLOW_ROOT}/scripts/cm-runtime.mjs" unset --user
```

- 四个预设为 `codex-only`、`claude-only`、`codex-codes`、`claude-codes`;映射以共享配置合同为准。
- `show` 只读,打印有效声明、预设、coder/reviewer adapter、source 与 `runtimes_source`;CLI 缺失只 WARN,可解析不证明配额可用。
- `set` 默认项目级;只修改 `runtimes.available` 与 coder/reviewer 的 adapter/source,其他原文保留;新文件从模板生成。校验失败不写。
- `set --user` 写 `~/.cm-workflow/runtimes.yml`(测试可用 `CM_WORKFLOW_HOME` 指定目录);`unset --user` 删除该文件,不删除项目声明。
- 解析顺序:项目 > 用户级默认 > 未声明;项目显式角色字段保留,冲突阻断。用户默认仅在项目没有 `runtimes.available` 时读取。
- 成功 `set` 复用统一日志 writer 写 `decision/route`;日志使用独立 run id,不绑定 specs、不改已有 run 指针。`show` 不记日志。

报告命令原始结果、写入路径、预设与来源;失败报告原因。若提示“preference saved, decision log failed”,明确配置已写、日志未成功,不伪称完全成功。

只改变新 run 的自动派发偏好;已创建 run 绑定其原配置,本命令不修改它们。
不执行安装、不改 settings、CLAUDE.md、任务状态或审查证据,不联网、不调用模型、不探测配额。

Attribution

kingxiaozhekingxiaozhe
View sourceMore from kingxiaozhe →
SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

281612 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2132 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →