cm

Plugin cm from marketplace codymaster in tody-agent/codymaster. Commands read from the repo's manifest — 1 month ago.

Skills (63)

• cm-video-factory

  Private Code-to-Video Engine using Remotion React, TTS (ElevenLabs/OpenAI), and Content Mastery. Creates pure VibeCoding-style animations for TikTok/Shorts/Reels automatically.

• xss-html-injection

  Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.

• cm-autopilot

  Easy-to-use conversational CLI (Codex style) for non-technical users to spawn parallel AI tasks supervised by a visual web dashboard.

• cm-brainstorm-idea

  Strategic analysis gate for existing products — multi-dimensional evaluation (tech, product, design, business) using Design Thinking + 9 Windows (TRIZ) + Double Diamond. Outputs 2-3 qualified options with recommendations. Use BEFORE cm-planning for complex initiatives and enhancements on existing co

• cm-browse

  Use when you need visual QA, screenshots, or post-deploy smoke testing through a real browser with Playwright.

• cm-clean-code

  Code hygiene gate — detect and eliminate dead code, duplicates, naming mess, and code smells. TRIZ-powered. Run after features, before PRs, during debt sprints.

• cm-code-review

  Full review lifecycle — request reviews, handle feedback with technical rigor, and complete branch integration. Use when completing tasks, receiving feedback, or finishing feature branches.

• cm-codeintell

  Unified code intelligence — Skeleton Index (zero-dep, <4s) + AST knowledge graph (CodeGraph) + architecture diagrams (Mermaid) + smart context builder. Pre-indexes code structure so AI agents understand any codebase instantly. 95% token compression for onboarding. 30% fewer tokens for deep analysis.

• cm-conductor-worktrees

  [Deprecated] parallel execution mode. Use `cm-execution` instead.

• cm-continuity

  Working memory protocol — maintains context across sessions via CONTINUITY.md. Inspired by Loki Mode. Read at turn start, update at turn end. Captures mistakes and learnings to prevent repeating errors.

• cm-dashboard

  [Deprecated] both visualize project state. Use `cm-status` instead.

• cm-debugging

  Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

• cm-deep-search

  Optional power-up — detects oversized codebases/docs and suggests tobi/qmd for local semantic search. Bridges cm-continuity (working memory) with long-term document retrieval. Zero-config detection, non-intrusive suggestion.

• cm-design-studio

  [Deprecated] design pipeline merged. Use `cm-design-system` instead.

• cm-design-system

  Ultimate Design System Intelligence. Manage, extract, replicate, and improve UI design systems. Extracts design tokens visually from existing sites (Harvester v5), manages multi-page tokens, and utilizes MCP servers like Google Stitch and Pencil.dev to generate complete, consistent design systems (S

• cm-dockit

  Knowledge systematization engine — analyze codebases, generate Personas, JTBD, Process Flows, technical docs, SOP user guides, API references. Output as Markdown or VitePress Premium. SEO-optimized, AI/LLM-readable. One scan = complete knowledge base.

• cm-ecosystem-roadmap

  Use when exploring the CodyMaster skill ecosystem roadmap, marketplace, or distro validation.

• cm-engineering-meta

  [Deprecated] engineering bridge merged. Use `cm-mcp-engineering` instead.

• cm-example

  A template demonstrating the universal format compatible with Antigravity, Codex, Cursor, and OpenClaw.

• cm-execution

  Use when executing implementation plans — choose mode: batch execution with checkpoints, subagent-per-task, or parallel dispatch for independent problems.

• cm-git-worktrees

  [Deprecated] worktree management is part of execution. Use `cm-execution` instead.

• cm-guardian-runtime

  Use when you need to check if a destructive command is blocked or run guardian freeze checks.

• cm-how-it-work

  Complete guide to vibe coding with the CodyMaster skill kit — from idea to deploy. Covers the full workflow, skills used at each phase, and common use cases. Read this first if you are new; reference it whenever you're unsure which skill to invoke.

• cm-identity-guard

  Verify and lock project identity before ANY git push, Cloudflare deploy, or Supabase operation. Essential when working with multiple GitHub accounts (personal + work), multiple Cloudflare accounts, or multiple Supabase/Neon projects. Prevents wrong-account deploys, cross-project secret leaks, and gi

• cm-mcp-engineering

  Use when you need to interact with the MCP engineering bridge tools (cm_plan, cm_review, cm_qa, cm_deploy, cm_search).

• cm-planning

  You MUST use this before any creative work or multi-step task. Explores intent, requirements, and design before implementation. Then documents the plan before coding.

• cm-post-deploy-canary

  [Deprecated] quality gate now covers tests + canary. Use `cm-quality-gate` instead.

• cm-project-bootstrap

  Use when starting any new project from scratch. Asks for project identity (name, GitHub org, Cloudflare account), detects project type, sets up design system, staging+production, i18n from day 1, SEO foundation, AGENTS.md manifest, test infrastructure, 8-gate deploy pipeline, and disciplined develop

• cm-qa-visual-cli

  [Deprecated] browser daemon overlap. Use `cm-browse` instead.

• cm-quality-gate

  Use before any deployment or completion claim. Enforces test gates, evidence-based verification, and frontend safety checks. No deploy without passing. No claims without evidence.

• cm-reactor

  Strategic codebase re-direction when requirements change, architecture doesn't fit, or tech debt blocks progress. TRIZ-powered pivot protocol for large codebases.

• cm-retro-cli

  Use at end of sprint to append operational learnings as structured JSONL to the project retro log.

• cm-safe-deploy

  Use when setting up deployment infrastructure for any project - establishes multi-gate deploy pipeline with test gates, build verification, frontend safety checks, and rollback strategy before code reaches production

• cm-safe-i18n

  Use when translating, extracting, or mass-converting hardcoded strings to i18n t() calls. Enforces multi-pass batching, parallel-per-language dispatch, 8 audit gates, and HTML integrity checks. Battle-tested through 21+ batches and 12 bug categories from the March 2026 incidents.

• cm-second-opinion-cli

  [Deprecated] engineering bridge merged. Use `cm-mcp-engineering` instead.

• cm-secret-shield

  [Deprecated] deploy safety merged. Use `cm-safe-deploy` instead.

• cm-security-gate

  [Deprecated] deploy safety merged. Use `cm-safe-deploy` instead.

• cm-skill-chain

  Skill Chain Engine — compose skills into automated pipelines. One task triggers multi-skill workflows with progress tracking, auto-detection, and step management.

• cm-skill-evolution

  Repair or extend CodyMaster skills with a three-mode loop: FIX, DERIVED, and CAPTURED, grounded in current repo tooling.

• cm-skill-health

  [Deprecated] skill lifecycle merged. Use `cm-skill-evolution` instead.

• cm-skill-index

  Progressive Disclosure skill index — efficient skill loading in 3 layers. Layer 1 (index, ~100 tokens) always loaded. Layer 2 (summary, ~300 tokens) loaded on context need. Layer 3 (full SKILL.md) loaded on execution only.

• cm-skill-mastery

  [Deprecated] discovery and meta-skill merged. Use `cm-skill-index` instead.

• cm-skill-search

  [Deprecated] discovery merged. Use `cm-skill-index` instead.

• cm-skill-share

  [Deprecated] skill lifecycle merged. Use `cm-skill-evolution` instead.

• cm-sprint-bus

  Use to run the full sprint pipeline: brainstorm → plan → design → tdd → build → review → qa → security → ship → monitor → retro.

• cm-start

  Start the CM Workflow to execute your objective from idea to production code.

• cm-status

  View a quick progress summary of current tasks.

• cm-tdd

  Use when implementing any feature or bugfix, before writing implementation code

• cm-terminal

  Use when running ANY terminal command - enforces clear progress logging, output reading, and error-stop behavior so terminal processes are never left unchecked

• cm-test-gate

  [Deprecated] quality gate now covers tests + canary. Use `cm-quality-gate` instead.

• cm-ui-preview

  [Deprecated] UI preview is part of design system. Use `cm-design-system` instead.

• cm-continuity

  Working memory protocol — maintains context across sessions via CONTINUITY.md. Inspired by Loki Mode. Read at turn start, update at turn end. Captures mistakes and learnings to prevent repeating errors.

• cm-ads-tracker
• cm-auto-publisher
• cm-booking-calendar
• cm-content-factory
• cm-cro-methodology
• cm-google-form
• cm-growth-hacking
• cm-jtbd
• cm-notebooklm
• cm-readit
• _root

Slash commands (11)

• /cm:bootstrap
• /cm:build
• /cm:content
• /cm:continuity
• /cm:debug
• /cm:demo
• /cm:deploy
• /cm:plan
• /cm:review
• /cm:track
• /cm:ux

Subagents (8)

• architect
• content-pro
• engineer
• pm
• reviewer
• security
• ux-designer
• vibe-coder

MCP servers (1)

• cm-context

  runs: node ./dist/mcp-context-server.js

Hooks (3)

• SessionStart

  if [ -f .cm/CONTINUITY.md ]; then echo '[cm] Working memory loaded from .cm/CONTINUITY.md'; head -30 .cm/CONTINUITY.md; else echo '[cm] No .cm/CONTINUITY.md found. Run /cm:cm-start to initialize.'; fi

• PreToolUse

  ${CLAUDE_PLUGIN_ROOT}/bin/cm-guard-secrets

• Stop

  ${CLAUDE_PLUGIN_ROOT}/bin/cm-save-continuity

Similar plugins