Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add JoelLewis/finance_skills --skill advertising-compliancegit clone --depth 1 https://github.com/JoelLewis/finance_skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/joellewis/finance_skills/advertising-compliance)<a href="https://agentmods.dev/skills/joellewis/finance_skills/advertising-compliance"><img src="https://agentmods.dev/badge/skills/joellewis/finance_skills/advertising-compliance/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/joellewis/finance_skills/advertising-compliance"><img src="https://agentmods.dev/badge/skills/joellewis/finance_skills/advertising-compliance.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00133 | $0.04981 |
| Opus 5 | $0.00067 | $0.02491 |
| Sonnet 5 | $0.00027 | $0.00996 |
| Haiku 4.5 | $0.00013 | $0.00498 |
Grade A, and why
advertising-compliance scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Advertising Compliance — Investment Marketing & Communications
Regulatory status current as of June 2026 — verify effective dates, dollar thresholds, and pending rulemakings against current SEC/FINRA/FinCEN sources before advising.
Core Concepts
SEC Marketing Rule (Rule 206(4)-1)
Effective November 4, 2022, the SEC's Marketing Rule replaced both the prior Advertising Rule (old Rule 206(4)-1) and the Cash Solicitation Rule (old Rule 206(4)-3) for investment advisers registered under the Investment Advisers Act of 1940. The rule applies to any "advertisement" — defined broadly as (1) any direct or indirect communication by an adviser that offers or promotes investment advisory services, or (2) any endorsement or testimonial for which the adviser provides compensation.
Seven general prohibitions. An advertisement may not:
- Include untrue statements of material fact or omit material facts necessary to make the statement not misleading in light of the circumstances.
- Include material statements of fact that the adviser does not have a reasonable basis for believing it can substantiate upon demand by the SEC.
- Include information that would reasonably be likely to cause an untrue or misleading inference to be drawn about a material fact relating to the adviser.
- Discuss potential benefits without providing fair and balanced treatment of associated material risks or limitations. A one-sided presentation of returns without discussing the corresponding risks violates this prohibition.
- Reference specific investment advice in a misleading manner. This prohibition targets cherry-picking — presenting only favorable past recommendations while omitting unfavorable ones.
- Include or exclude performance results, or present performance time periods, in a manner that is not fair and balanced. This encompasses selective time-period presentation, choosing only the best-performing periods and ignoring others.
- Be otherwise materially misleading.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 215 lines · 133 tokens per session scan A 76fac6c05da4
advertising-compliance is a skill published in the GitHub repository JoelLewis/finance_skills (184 stars, last pushed 1mo ago), licensed MIT. It adds 133 tokens to every session and 4,981 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
EU AI Act High-Risk Obligations
PASS/FAIL/N/A checklist for the high-risk AI obligations under Articles 8-15 of the EU AI Act, plus the quality management system, conformity assessment, registration, post-market monitoring, and incident reporting.
EU AI Act General-Purpose AI
Checklist for the general-purpose AI (GPAI) obligations under Articles 51-55 — technical documentation, copyright policy, training-data summary, and systemic-risk obligations (evaluation, adversarial testing, incident reporting, cybersecurity).
EU AI Act Risk Classification
Decision tree for classifying an AI system into the EU AI Act risk tier (unacceptable/high/limited/minimal) and identifying the actor role (provider/deployer/importer/distributor).
EU AI Act Transparency
Checklist for the Article 50 transparency obligations — chatbot AI disclosure, machine-readable marking of synthetic content, emotion-recognition/biometric-categorisation notice, and deepfake/public-interest-text labelling.
Exception Documentation
The template for documenting a deliberate, approved deviation from an infrastructure invariant — rationale, compensating control, approver, and expiry — instead of a silent workaround.
fsi-compliance-checker
Maps code, architecture, and infrastructure changes to specific control IDs in PCI-DSS v4.0 and MAS TRM (Singapore financial regulator), producing an audit-traceable findings report with per-control remediation.