Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add modu-ai/moai-cowork --skill legal-law-researchgit clone --depth 1 https://github.com/modu-ai/moai-coworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/modu-ai/moai-cowork/legal-law-research)<a href="https://agentmods.dev/skills/modu-ai/moai-cowork/legal-law-research"><img src="https://agentmods.dev/badge/skills/modu-ai/moai-cowork/legal-law-research/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/modu-ai/moai-cowork/legal-law-research"><img src="https://agentmods.dev/badge/skills/modu-ai/moai-cowork/legal-law-research.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Agent Snooping · line 74 Skill accesses MCP server configuration files (mcp.json). MCP configs contain server URLs, authentication tokens, and tool definitions — reading them allows the skill to discover and potentially abuse other tool integrations.Fix: Remove all code or instructions that read MCP configuration files (mcp.json). MCP server details should be managed by the agent runtime, not read by individual skills.
- high Agent Snooping · line 83 Skill accesses MCP server configuration files (mcp.json). MCP configs contain server URLs, authentication tokens, and tool definitions — reading them allows the skill to discover and potentially abuse other tool integrations.Fix: Remove all code or instructions that read MCP configuration files (mcp.json). MCP server details should be managed by the agent runtime, not read by individual skills.
- high Privilege Escalation · line 89 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00366 | $0.03734 |
| Opus 5 | $0.00183 | $0.01867 |
| Sonnet 5 | $0.00073 | $0.00747 |
| Haiku 4.5 | $0.00037 | $0.00373 |
Grade A, and why
legal-law-research scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 187 lines — stays where its author put it; the contents beside it link to each section on GitHub.
법령 리서치 (Law Research)
개요
국가법령정보센터(법제처) 법령·판례·행정규칙·자치법규·조약·해석례(국세청 포함) 원문 조회와 정밀 분석을 전담한다. korean-law MCP(chrisryugj/korean-law-mcp v4.4, MIT)가 법제처 42개 API를 9개 도구로 압축하며, LLM 환각 방지 인용 검증·판례 생사 확인·행위시법 판단·조문 영향 그래프를 지원한다.
면책 고지: AI 보조 조회이며 전문 법률 자문을 대체하지 않습니다
트리거 키워드
법령 조문, 법률 본문, 판례 검색, 판례 생사, 인용 검증, 행위시법, 신구대조표, 영향 그래프, 조례, 시행령, 시행규칙, 행정규칙, 자치법규, 조약, 해석례, 국세청 해석, 별표, 서식, 법제처, law.go.kr, Korean Law MCP
지원 도구 (korean-law MCP — 9개)
| 구분 | 도구 | 설명 |
|---|---|---|
| 리서치 | legal_research |
다단계 법령 리서치. task 8종 선택 (아래 표) |
| 정밀분석 | legal_analysis |
검증·분석. mode 4종 선택 (아래 표) |
| 법령 | search_law |
법령 검색 → lawId, MST 획득 |
| 법령 | get_law_text |
조문 전문 조회 (조호=4자리 숫자 사용) |
| 법령 | get_annexes |
별표/서식 조회 (금액표·요율표·별지서식) |
| 통합 | search_decisions |
17개 도메인 통합 검색 (판례·헌재·조세심판·공정위·노동위·관세·해석례·행심·개인정보위·권익위·소청심사·학칙·공사공단·공공기관·조약·영문법령) |
| 통합 | get_decision_text |
17개 도메인 결정례 전문 조회 |
| 메타 | discover_tools |
전문 도구 검색 (용어·이력·비교 등) |
| 메타 | execute_tool |
전문 도구 프록시 실행 |
legal_research task 8종
| task | 설명 |
|---|---|
full_research (기본) |
종합 리서치 (AI검색 → 법령 → 판례 → 해석). customs/action_plan 시나리오 확장 |
law_system |
법체계 분석 (3단비교, 위임구조). delegation/impact 확장 |
action_basis |
처분 근거 확인 (허가·인가·처분). penalty 확장 |
dispute_prep |
쟁송 대비 (불복·소송·심판) |
amendment_track |
개정 추적 (신구대조, 연혁). timeline/time_travel 확장 |
ordinance_compare |
조례 비교 (상위법 → 전국 조례). compliance 확장 |
procedure_detail |
절차·비용·서식 안내. manual 확장 |
document_review |
계약서·약관 리스크 분석 (text 필수) |
legal_analysis mode 4종
| mode | 설명 | 필수 파라미터 |
|---|---|---|
verify_citations |
LLM 환각 방지 — 인용 조문 실존 여부 일괄 검증 | text |
cite_check |
판례 생사 확인 — 후속 인용 역추적 + 변경·폐기 감지 (한국형 Citator) | caseNumber |
applicable_law |
행위시법 판단 — 시점 적용 버전 + 부칙 경과규정 발췌 | lawName, date |
impact_map |
조문 영향 그래프 — 인용 판례·해석·자치법규 역방향 탐색 + mermaid | lawName, jo |
워크플로우
1단계: OC 키 확인 (필수)
korean-law MCP는 법제처 Open API OC 키가 사용자마다 필요하다 (공용키 모덜 아님).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 187 lines · 366 tokens per session scan A 7b66002a317a
legal-law-research is a skill published in the GitHub repository modu-ai/moai-cowork (300 stars, last pushed 9d ago), licensed Apache-2.0. It adds 366 tokens to every session and 3,734 once invoked, about $0.0018 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
penalista-atti
Redazione di atti processuali penali italiani con formule corrette e struttura giuridicamente appropriata. ATTIVARE SEMPRE quando l'avvocato chiede di scrivere, redigere, preparare o impostare uno di questi atti: memoria difensiva, atto di appello, ricorso per Cassazione, istanza di riesame, istanza di revoca o…
penalista-cautelare
Workflow completo per le misure cautelari personali nel processo penale italiano. ATTIVARE SEMPRE per: riesame cautelare, appello de libertate, revoca o sostituzione misura cautelare, calcolo termini di fase della custodia cautelare, istanza di scarcerazione per scadenza termini, analisi dei presupposti cautelari…
penalista-giurisprudenza
Ricerca e organizzazione della giurisprudenza penale italiana per la difesa. ATTIVARE SEMPRE quando l'avvocato cerca sentenze, massime o orientamenti della Cassazione penale, della Corte EDU o di altri organi giurisdizionali, o dice: 'cerca giurisprudenza su', 'ci sono sentenze favorevoli su', 'cosa dice la Cassazione…
penalista-esecuzione
Workflow completo per il diritto penitenziario e l'esecuzione penale italiana. ATTIVARE SEMPRE quando l'avvocato si occupa di: misure alternative alla detenzione (affidamento in prova, detenzione domiciliare, semiliberta), liberazione anticipata, liberazione condizionale, permessi premio, Tribunale di Sorveglianza…
penalista-scadenze
Calcolo preciso dei termini processuali penali italiani con ragionamento esplicito e aggiornamento dello scadenziario. ATTIVARE SEMPRE quando l'avvocato chiede di calcolare un termine, una scadenza, una data limite processuale, o dice: 'entro quando devo depositare', 'quando scade il termine per', 'ho ancora tempo…
penalista-archivio
Conversione di documenti (PDF, sentenze, atti, dottrina) in Markdown indicizzato per la Knowledge Base, e governo dell'INDICE della giurisprudenza. ATTIVARE quando l'avvocato dice: 'converti questo PDF', 'metti questa sentenza in memoria', 'aggiungi alla knowledge base', 'indicizza i massimari', 'trasforma in…