Laporan audit skill
cm-ai Laporan audit.
用户明确说“规格已确认，开始实现”或要求按已审批 CM specs 开发时使用。新任务默认由 JS workflow 驱动 N1-N8，完成开发、独立审查、QA 与文档同步；模糊点子、未审规格和单独一句“继续”不能触发编码批准。
Trust Score OpenAgentSkill
Trust Score OpenAgentSkill
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
Adopsi GitHub
Info62
104 star GitHub
Aktivitas star/fork
Peringatan51
104 star dan 0 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Pemeliharaan terbaru
Lulus100
5 hari sejak push
Kejelasan lisensi
Lulus86
MIT
Kelengkapan README/SKILL.md
Lulus86
Metadata memuat konteks penggunaan dan alur kerja yang cukup
Risiko dependensi/runtime
Info64
command execution surface, network or browser surface
Ketersediaan pemasangan
Lulus92
npx skills add kingxiaozhe/cm-workflow --skill cm-ai
Keamanan perintah pemasangan
Lulus92
Jalur pemasangan paket atau runtime standar
Cakupan izin
Info62
shell or command execution, network or browser access
Bukti repositori
Lulus86
https://github.com/kingxiaozhe/cm-workflow/tree/main/skills/cm-ai
Status peninjauan
Peringatan46
Persetujuan tinjauan AI belum ada
Hasil terbukti Agent
Info54
Belum ada data hasil Agent
Pemeriksaan
Tinjauan pemasangan dan adopsi
Jalur pemasangan
92
npx skills add kingxiaozhe/cm-workflow --skill cm-ai
Repositori
88
https://github.com/kingxiaozhe/cm-workflow/tree/main/skills/cm-ai
Lisensi
86
MIT
Pemeliharaan
100
5 hari sejak push
Tinjauan AI
55
Review approval is missing
Kelengkapan README/SKILL.md
86
Usable description available
Risiko dependensi
64
command execution surface, network or browser surface
Keamanan perintah pemasangan
92
Jalur pemasangan paket atau runtime standar
Cakupan izin
62
shell or command execution, network or browser access
Aktivitas star/fork
51
104 star dan 0 fork; aktivitas issue tidak tersedia dalam metadata saat ini
Adopsi
68
104 star GitHub
Peringatan
- Persetujuan tinjauan AI belum ada
- Quality score needs review
- Stars/forks activity: 104 stars, 0 forks; issue activity unavailable in current metadata
- Review status: AI review approval is missing
Metode
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Bandingkan opsi sekitar
Skill terkait untuk diaudit berikutnya
weather
Current weather and forecasts with web_fetch, falling back to wttr.in curl for locations, rain, temperature, travel planning.
391K Star · Laporan audit
mcporter
List, configure, authenticate, call, and inspect MCP servers/tools with mcporter over HTTP or stdio.
391K Star · Laporan audit
release-openspec
Use this skill when releasing OpenSpec: audit merged work and changeset coverage, decide whether a catch-up changeset PR is needed, prepare or resume the Changesets Version Packages PR, cut a beta or stable release, verify publishing, and polish GitHub release notes. Also use when asked whether an open release PR is complete, what the next release step is, or to continue a release paused for human approval.
71K Star · Laporan audit