Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/agent-engineer-master/skill-engineer/compliance-checknpx skills add Agent-Engineer-Master/skill-engineer --skill compliance-checkgit clone --depth 1 https://github.com/Agent-Engineer-Master/skill-engineerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/agent-engineer-master/skill-engineer/compliance-check)<a href="https://agentmods.dev/skills/agent-engineer-master/skill-engineer/compliance-check"><img src="https://agentmods.dev/badge/skills/agent-engineer-master/skill-engineer/compliance-check.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00128 | $0.01823 |
| Opus 5 | $0.00064 | $0.00911 |
| Sonnet 5 | $0.00026 | $0.00365 |
| Haiku 4.5 | $0.00013 | $0.00182 |
Grade A, and why
compliance-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 182 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/compliance-check — US Regulatory Compliance Assessment
Assess compliance likelihood for any consumer product before listing for US sale.
Usage: /compliance-check [input]
Accepted inputs:
- CJ product PID (UUID like
E581D9BF-BCBC-421B-B12D-3762565A1C50, or numeric 18+ digit string) - CJ product URL (
https://cjdropshipping.com/product/xxx) - Amazon ASIN (
B08GFK757R) - Product name or free text description (
"bamboo cutting board with juice groove")
CRITICAL: Role and Scope
This skill produces evidence-based assessments, not legal opinions. A 🟡 verdict means "market evidence suggests the supplier has documentation — request it." It does not mean the product is safe to list without obtaining actual certificates.
No product advances past rfq-sent status without a compliance verdict from this skill.
Step 1 — Parse Input and Resolve Product Identity
Determine input type:
CJ PID (UUID pattern xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx, numeric 18+ digits, or CJHD prefix):
If you have a CJ lookup script in your project, run it with --pid [PID] --pretty.
Otherwise, use the CJ product URL directly or the product name as a search anchor.
Extract: name, category, description, weight_g, length_cm, width_cm, height_cm, variants[].price.
CJ product URL: Extract PID from URL path, then proceed as CJ PID above.
Amazon ASIN (B0 prefix + alphanumeric, 10 chars):
WebFetch https://www.amazon.com/dp/[ASIN] — extract title, description, age rating, compliance signals.
Product name / free text: Use as search anchor directly. Skip CJ API lookup.
Store these for use throughout:
PRODUCT_NAME— resolved product namePRODUCT_INPUT— original input as-isPRODUCT_CATEGORY— assigned in Step 2SEARCH_ANCHOR— best 3–5 word phrase for searches (e.g. "bamboo cutting board" not the full CJ title)
Step 2 — Classify Product and Load Compliance Requirements
Read references/compliance-matrix.md.
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 182 lines · 128 tokens per session scan A 395c652885b9
compliance-check is a skill published in the GitHub repository Agent-Engineer-Master/skill-engineer (8 stars, last pushed 1mo ago), licensed MIT. It adds 128 tokens to every session and 1,823 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
policy
Define and enforce policies, access controls, and compliance rules over Semantica knowledge graphs.
rpce-merge-pr-batch
Safely process an explicitly ordered batch of RepoPrompt CE pull requests end to end: preserve a dirty original checkout, isolate each PR in an external disposable worktree, use window- and context-scoped CE rpce-cli Agent Mode review, repair and validate, require exact-head hosted checks, merge with merge commits…
cross-border-ecommerce
Cross-border e-commerce expansion advisor. Scores target markets on 8 weighted dimensions (market size, ecommerce penetration, competition, regulatory complexity, logistics infrastructure, payment ecosystem, cultural distance, IP protection), compares 5 fulfillment models with cost and transit data, provides…
shopify-app-store-review
Run a pre-submission compliance check against your Shopify app's codebase. Reviews App Store requirements and surfaces likely issues before you submit for official review.
privacy-kr
한국 서비스용 처리방침·이용약관·회원가입 동의 모달·쿠키 배너 자동 생성. 개인정보보호법 §30, 2025.4.21 작성지침, 2026.3 개정법, 공정위 전자상거래 표준약관 10023호 반영. Next.js 1316 프로젝트 대상.
amazon-category-ungating
Category and brand ungating — requirements, documentation, appeal process, restricted categories guide.