Cm guardian runtime
Skill tody-agent/codymaster/.codex/skills/cm-guardian-runtime
Use when you need to check if a destructive command is blocked or run guardian freeze checks.From its SKILL.md
npx -y skills add tody-agent/codymaster --skill cm-guardian-runtimeAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
SKILL.md
0.9 KB, 206 tokens by cl100k_base, as published. Nobody here has run it
cm-guardian-runtime — destructive command & freeze checks
Commands
cm guardian check -- git push --force origin main # exits 1 if blocked
cm guardian path-check --file ./src/app.ts --roots src,lib
Behaviour
- Regex set for
rm -rf,DROP TABLE,git push --force,git reset --hard, pipes to shell, etc. - Prefix whitelist includes
npm run build,npm test,npx vitest. - Violations append to
.cm/guardian.log.
Investigate / debug mode
When using cm-debugging or root-cause work, treat freeze roots as mandatory: only edit inside allowed directories until the hypothesis is proven.
Config
See .cm/config.example.yaml → guardian:. Hook patterns (Cursor / Codex): docs/workflows/guardian-hooks.md (repo root).
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.