Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/modu-ai/moai-coworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/modu-ai/moai-cowork/moai-lawyer)<a href="https://agentmods.dev/plugins/modu-ai/moai-cowork/moai-lawyer"><img src="https://agentmods.dev/badge/plugins/modu-ai/moai-cowork/moai-lawyer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/modu-ai/moai-cowork/moai-lawyer"><img src="https://agentmods.dev/badge/plugins/modu-ai/moai-cowork/moai-lawyer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
moai-lawyer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "moai-lawyer",
"displayName": "⚖️ 법무 담당",
"version": "1.2.0",
"description": "법무 전담 AI 코워커 — 계약 검토·NDA 트리아지·컴플라이언스 점검·법령/판례 리서치·특허 검색/분석·식약처 안전 기준 스킬 10종. 국가법령정보 MCP(korean-law) 연동으로 인용 검증까지 수행합니다. 이런 분께 추천: 1인 사업자·스타트업 운영자. ※ 법률 자문 대체가 아닌 참고 자료입니다.",
"author": {
"name": "모두의 AI",
"email": "[email protected]"
},
"license": "Apache-2.0",
"userConfig": {
"KOREAN_LAW_OC": {
"type": "string",
"title": "법제처 Open API OC 키",
"description": "law.go.kr 에서 무료로 발급받는 사용자별 키입니다.",
"sensitive": true
}
}
}
What it installs
The manifest is a name and a version. 10 skills, 2 agents travel with it, and installing the plugin installs all of them — 2,226 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill legal-law-research A 366 tokens
- Skill legal-contract-review A 101 tokens
- Skill legal-compliance-check A 101 tokens
- Skill legal-legal-risk A 113 tokens
- Skill legal-mfds-safety A 321 tokens
- Skill legal-nda-triage A 110 tokens
- Skill legal-patent-analyzer A 232 tokens
- Skill legal-service-launch-checklist A 133 tokens
- Skill legal-patent-search A 215 tokens
- Skill legal-iros-registry-automation B 310 tokens
- Agent legal-researcher A 105 tokens
- Agent risk-auditor A 119 tokens
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 20 lines scan A 23d59f6dbcf9
moai-lawyer is a plugin published in the GitHub repository modu-ai/moai-cowork (298 stars, last pushed 6d ago), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other plugins, from other repositories
penalista-italia
Kit operativo per avvocati penalisti italiani: strategia difensiva, redazione atti, calcolo termini e prescrizione, misure cautelari, ricerca giurisprudenziale, esecuzione penale. 9 skill specializzate sul processo penale italiano. Di Synthos Logic.
dev-tooling
Three MCP servers for PHP and JavaScript operations plus an optional PHP language server. PHP (php-tooling): PHPStan, ECS, Rector, PHPUnit, PHPUnit coverage gap analysis, Symfony Console. Administration (js-admin-tooling): ESLint, Stylelint, Prettier, Jest, TypeScript, Vite builds. Storefront (js-storefront-tooling)…
ma-laws
Look up and search the Massachusetts Constitution, General Laws, and Rules of Civil Procedure using a verified local corpus downloaded on first use.
fakoli-speak
Multi-provider text-to-speech with owned playback, opt-in autospeak, and local cost estimates.
gamedev
revenantworks-gamedev — game-development skills on the -smith motif. First member: pixelsmith, art direction for pixel art that must read at several zoom scales at once.
ga-court-docs
Draft and format pleadings, declarations, motions, notices, and proposed orders for Georgia courts. Applies O.C.G.A. § 9-11-10 + Uniform Superior Court Rules statewide formatting; includes Fulton County Superior Court and Cobb County Superior Court specifics plus a county-courts roll-up; supports pro se workflows.…