cm-security Eval report.

Task wording matches this skill metadata.

• Evaluate cm-security before installing it in an agent workflow
• security
• Browser automation workflows; Claude Code teams; builders willing to evaluate younger projects

Install handoff is available.

• npx skills add kingxiaozhe/cm-workflow --skill cm-security

standard package or runtime install path

• npx skills add kingxiaozhe/cm-workflow --skill cm-security

Good trust signals with a few areas worth checking before rollout.

• Strong shortlist
• 27 GitHub stars
• MIT

Needs review

• Low GitHub adoption signal

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

• Test manually in an isolated workspace and compare against safer alternatives.
• High-risk permission hints: Shell or command execution

MIT

• MIT

shell or command execution, network or browser access

• Shell or command execution: high
• Network access: medium