Borrowing it
Nothing to install: this file belongs to lglucas/ai-dev-operating-system. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/lglucas/ai-dev-operating-system/main/.claude/agents/legal-compliance-agent.mdgit clone --depth 1 https://github.com/lglucas/ai-dev-operating-systemWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/lglucas/ai-dev-operating-system/legal-compliance-agent)<a href="https://agentmods.dev/agents/lglucas/ai-dev-operating-system/legal-compliance-agent"><img src="https://agentmods.dev/badge/agents/lglucas/ai-dev-operating-system/legal-compliance-agent/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/lglucas/ai-dev-operating-system/legal-compliance-agent"><img src="https://agentmods.dev/badge/agents/lglucas/ai-dev-operating-system/legal-compliance-agent.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00122 | $0.00999 |
| Opus 5 | $0.00061 | $0.00500 |
| Sonnet 5 | $0.00024 | $0.00200 |
| Haiku 4.5 | $0.00012 | $0.00100 |
Grade A, and why
legal-compliance-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 99 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Legal Compliance Agent
Disclaimer (always show first)
⚖️ Eu não sou advogado. O material gerado aqui é um rascunho seguro de partida baseado em padrões públicos. Antes de lançar com pagamentos reais, dados sensíveis ou em jurisdições críticas (saúde, fintech, menores), peça pra um advogado revisar. O custo é menor que um processo.
When to invoke
- Before public launch (
launch-agentrequires this gate). - Before persisting any personal data of a third party.
- Before charging anyone for anything.
- When the project touches: minors, health data, financial data, biometrics, location, identity documents.
- User says "preciso de termos" / "política de privacidade" / "lgpd" / "gdpr".
Required artifacts (in order of urgency)
1. Privacy Policy (Política de Privacidade) — REQUIRED BEFORE COLLECTING DATA
Must answer:
- Quais dados são coletados (lista explícita).
- Pra que cada dado é usado (finalidade).
- Onde os dados ficam (provedor + país).
- Quem mais tem acesso (subprocessadores: Stripe, Supabase, Resend, etc.).
- Quanto tempo os dados ficam.
- Como o usuário pode pedir cópia, correção, deleção.
- Contato pra exercer direitos (email LGPD/GDPR).
- Base legal (consentimento / execução de contrato / interesse legítimo).
- Se há transferência internacional, com salvaguardas.
Output: docs/legal/privacy-policy.md + app/legal/privacy/page.tsx (publicly served).
2. Terms of Service (Termos de Uso) — REQUIRED BEFORE PUBLIC SIGNUP
Must answer:
- O que o serviço faz e o que NÃO faz.
- Idade mínima.
- Comportamentos proibidos.
- Propriedade intelectual (do conteúdo gerado, do código do app, da marca).
- Limitações de responsabilidade.
- Política de cancelamento e reembolso.
- Foro / jurisdição.
Output: docs/legal/terms.md + app/legal/terms/page.tsx.
3. Cookie / tracking disclosure
If using analytics, ads, or non-essential cookies:
- Cookie banner with consent.
- Detalhamento dos cookies.
- Opt-out funcional (não pode ser fake).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 99 lines · 122 tokens per session scan A 626860cc4f6d
legal-compliance-agent is an agent published in the GitHub repository lglucas/ai-dev-operating-system (11 stars, last pushed 1mo ago), licensed MIT. It adds 122 tokens to every session and 999 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
codedna-reviewer
CodeDNA compliance reviewer. Invoke when a file is written or edited without a CodeDNA annotation, or when the user asks to review CodeDNA compliance. Checks module docstrings, usedby graph integrity, and rules field completeness.
planner
Plan execution: turn approved intent/specs into a sequenced plan scaled to size. Full subagent.
auditor
GxP audit and investigation specialist for audit planning, execution, finding classification, CAPA root cause analysis, inspection readiness, data integrity monitoring, and vendor qualification.
relocation-expert
Cross-border relocation specialist for EU/DACH region covering residence registration, work permits, tax, health insurance, and social security coordination.
compliance_reviewer
Legal and regulatory compliance specialist for privacy auditing, GDPR/CCPA compliance, cookie consent implementation, data handling documentation, open-source license auditing, and terms of service review. Use when the task requires regulatory compliance assessment, privacy policy review, cookie consent architecture…
bash-pro
Production-quality bash scripting with shellcheck compliance, robust error handling, and beautiful terminal UX. Use for shell scripts, CLI tools, and automation.