Borrowing it
Nothing to install: this file belongs to ARCASSystems/FounderOS. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/ARCASSystems/FounderOS/main/.claude/commands/legal-add-source.mdgit clone --depth 1 https://github.com/ARCASSystems/FounderOSWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/arcassystems/founderos/legal-add-source)<a href="https://agentmods.dev/commands/arcassystems/founderos/legal-add-source"><img src="https://agentmods.dev/badge/commands/arcassystems/founderos/legal-add-source/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/arcassystems/founderos/legal-add-source"><img src="https://agentmods.dev/badge/commands/arcassystems/founderos/legal-add-source.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.01340 |
| Opus 5 | $0.00016 | $0.00670 |
| Sonnet 5 | $0.00007 | $0.00268 |
| Haiku 4.5 | $0.00003 | $0.00134 |
Grade A, and why
legal-add-source scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Legal & Compliance: Add Source
Adds a new primary source to your jurisdiction's reference set. Use when:
- The skill says "I don't have a reference for X" while answering a question
- A new law or ministerial decision was gazetted
- You're populating a non-UAE jurisdiction for the first time
- A regulator publishes an updated portal you want the skill to consult
This command does NOT auto-extract law text from the source. It registers the source and (if a domain file is missing) creates a stub. The user fills the domain file as they ask questions and the skill quotes the source.
Procedure
-
Verify install. If
core/identity.mddoes not exist, reply:Founder OS not set up here. Say "set up Founder OS" first.and stop. -
Parse the argument. Expected forms:
https://...→ URL sourceC:\path\to\file.pdfor/path/to/file.pdf→ local PDF<url> -- <description>→ URL with inline description
If no argument was passed, ask: "What source do you want to add? Paste a URL, a PDF path, or both. Optionally add
-- <description>for context." -
Resolve jurisdiction. Read
core/identity.mdjurisdiction:field. If missing, reply:No jurisdiction set. Say "set up legal" first.and stop. -
For URL sources: WebFetch the URL to confirm it resolves. If it returns 4xx/5xx or redirects to an unrelated page, warn the user: "URL returns . Add anyway? (yes / no)". If 200, capture the page title and a one-paragraph summary for the source's
notes:field. -
For PDF sources: verify the file exists at the path given. If not, reply: "Path
<path>does not exist. Check the path and re-run." and stop. If it exists, capture filename + size. -
Ask the user three classification questions (one at a time):
a. "Which domain(s) does this source cover? Pick one or more: company-formation, employment, tax-vat, visas-immigration, contracts-commercial, ip-trademarks, data-protection, dispute-resolution, industry-specific, federal-law-text. Comma-separated."
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 98 lines · 33 tokens per session scan A b3744bbc9863
legal-add-source is a command published in the GitHub repository ARCASSystems/FounderOS (5 stars, last pushed 25d ago), licensed MIT. It adds 33 tokens to every session and 1,340 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
voice-compliance
Voice/telephony compliance check — invokes voice-ai-reviewer to produce TM-voice-{slug}.md with TCPA, STIR/SHAKEN, state recording-consent, EU AI Act Art. 50, and synth-voice deepfake-law gaps.
au-pspf
You are an enterprise architect generating a Protective Security Policy Framework (PSPF) compliance assessment for an Australian Government entity or contractor handling government information.
compliance-audit
Full regulatory compliance audit for GDPR, HIPAA, SOC2, PCI-DSS, ISO 27001, and other frameworks with gap analysis, remediation planning, and evidence collection.
india-checklist
Interactive non-code compliance checklist — business registration, DPO, GST, CERT-In, grievance officer, and more.
arckit.fr-rgpd
You are helping an enterprise architect generate a French CNIL Compliance Assessment — the French-specific GDPR layer applied by the CNIL (Commission Nationale de l'Informatique et des Libertés). Run this after /arckit:eu-rgpd to add French obligations that go beyond the EU GDPR baseline.
rgpd
Questões de RGPD e violação de dados — referência, playbook e checklist. GDPR and data-breach matters — reference, playbook and checklist.