Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/mr-kelly/skillsnpx agentmods add skills/mr-kelly/skills/kelly-legal-firm-radarWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mr-kelly/skills/kelly-legal-firm-radar)<a href="https://agentmods.dev/skills/mr-kelly/skills/kelly-legal-firm-radar"><img src="https://agentmods.dev/badge/skills/mr-kelly/skills/kelly-legal-firm-radar/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mr-kelly/skills/kelly-legal-firm-radar"><img src="https://agentmods.dev/badge/skills/mr-kelly/skills/kelly-legal-firm-radar.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Anti-Refusal · line 153 Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00133 | $0.02880 |
| Opus 5 | $0.00067 | $0.01440 |
| Sonnet 5 | $0.00027 | $0.00576 |
| Haiku 4.5 | $0.00013 | $0.00288 |
Grade A, and why
kelly-legal-firm-radar scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 169 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Legal Firm Radar
Overview
Use this skill as a Busabase Cloud App-in-Skill desk. It uses anonymized internal casebase metadata to prepare management insights: practice mix, local court outcomes, lawyer capability profiles, quality indicators, and approved brand or staffing reports. Reading raw casebase/practice-area/lawyer metrics is a genuine local-file operation a browser cannot perform: scripts/import_metrics.mjs is the only place a metric or insight enters the system. The AirApp itself only reads Busabase and writes review decisions (approve / request changes / revise / block); scripts/execute_decisions.mjs records the planned follow-up, and scripts/export_management_report.mjs is the only place an approved management report leaves the system.
Default behavior is AirApp-first. Unless the user explicitly asks only for explanation, import what's due and give the user the clickable AirApp URL (or the local preview URL when local preview is explicitly requested). Use chat-only mode only when the user says "纯聊天", "chat only", "不要打开 UI", or similar; in that mode present stable refs such as Insight #1 and take verdicts in conversation.
Business Role
Use this as the partner review gate for firm-level analytics. It consumes anonymized casebase metadata and approved summaries to prepare practice mix, lawyer capability, quality, staffing, and brand proof insights with methodology notes. Do not use it for matter strategy, legal advice, raw document review, compensation decisions, or external marketing claims without separate approval.
Mandatory Dependencies
- Read and follow
$kelly-app-skill-creatorfor product behavior, visual quality, responsive layout, and the complete canonicalcontent/kelly-legal-firm-radar-app/artifact. - Read and follow
$busabasefor connection, target Space, node discovery, ChangeRequests, review, and merge behavior. - Read and follow
$busabase-app-creatorfor resource modeling, AirApp runtime limits, security, validation, and deployment.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 233 B
- assets/screenshots/checks-zh-CN.webp 130 B
- assets/screenshots/checks.webp 130 B
- assets/screenshots/entities-zh-CN.webp 130 B
- assets/screenshots/entities.webp 130 B
- assets/screenshots/needs-review-zh-CN.webp 130 B
- assets/screenshots/needs-review.webp 130 B
- assets/screenshots/overview-zh-CN.webp 130 B
- assets/screenshots/overview.webp 130 B
- assets/screenshots/thumbs/checks-zh-CN.webp 130 B
- assets/screenshots/thumbs/checks.webp 130 B
- assets/screenshots/thumbs/entities-zh-CN.webp 130 B
- assets/screenshots/thumbs/entities.webp 130 B
- assets/screenshots/thumbs/needs-review-zh-CN.webp 130 B
- assets/screenshots/thumbs/needs-review.webp 130 B
- assets/screenshots/thumbs/overview-zh-CN.webp 130 B
- assets/screenshots/thumbs/overview.webp 130 B
- assets/screenshots/thumbs/workbench-zh-CN.webp 130 B
- assets/screenshots/thumbs/workbench.webp 130 B
- assets/screenshots/workbench-zh-CN.webp 130 B
- assets/screenshots/workbench.webp 131 B
- busabase.json 1.1 KB
- content/_folder.json 341 B
- content/checks/base.json 1.1 KB
- content/entities/base.json 1.4 KB
- content/items/base.json 4.8 KB
- content/items/records.ndjson 5.4 KB
- content/kelly-legal-firm-radar-app/_node.json 361 B
- content/kelly-legal-firm-radar-app/.busabaseignore 194 B
- content/kelly-legal-firm-radar-app/app/accent-theme.css 8.0 KB
- content/kelly-legal-firm-radar-app/app/accent-theme.js 7.3 KB runs code
- content/kelly-legal-firm-radar-app/app/app.js 29 KB runs code
- content/kelly-legal-firm-radar-app/app/base-ui.css 13 KB
- content/kelly-legal-firm-radar-app/app/demo-visuals.css 1.6 KB
- content/kelly-legal-firm-radar-app/app/demo-visuals.js 3.4 KB runs code
- content/kelly-legal-firm-radar-app/app/i18n/messages.js 3.0 KB runs code
- content/kelly-legal-firm-radar-app/app/index.html 4.9 KB
- content/kelly-legal-firm-radar-app/app/js/busabase-client.js 226 B runs code
- content/kelly-legal-firm-radar-app/app/js/config.js 7.2 KB runs code
- content/kelly-legal-firm-radar-app/app/js/connect-gate.js 1.6 KB runs code
- content/kelly-legal-firm-radar-app/app/js/demo-visuals-data.js 4.4 KB runs code
- content/kelly-legal-firm-radar-app/app/js/firm-radar-model.js 13 KB runs code
- content/kelly-legal-firm-radar-app/app/js/providers/busabase-provider.js 12 KB runs code
- content/kelly-legal-firm-radar-app/app/js/providers/demo-provider.js 7.7 KB runs code
- content/kelly-legal-firm-radar-app/app/js/providers/index.js 270 B runs code
- content/kelly-legal-firm-radar-app/app/js/review-views.js 16 KB runs code
- content/kelly-legal-firm-radar-app/app/js/runtime.js 3.4 KB runs code
- content/kelly-legal-firm-radar-app/app/styles.css 22 KB
- content/kelly-legal-firm-radar-app/app/vendor/busabase-airapp-gate.css 6.1 KB
- content/kelly-legal-firm-radar-app/app/vendor/busabase-airapp-gate.js 11 KB runs code
- content/kelly-legal-firm-radar-app/app/vendor/busabase-airapp.js 552 KB runs code
- content/kelly-legal-firm-radar-app/app/vendor/busabase-sdk.js 787 KB runs code
- content/kelly-legal-firm-radar-app/package.json 1.1 KB
- content/kelly-legal-firm-radar-app/pnpm-lock.yaml 5.2 KB
- content/kelly-legal-firm-radar-app/pnpm-workspace.yaml 50 B
- content/kelly-legal-firm-radar-app/scripts/check.mjs 4.2 KB runs code
- content/kelly-legal-firm-radar-app/server.js 3.1 KB runs code
- content/kelly-legal-firm-radar-app/test/firm-radar-model.test.mjs 9.2 KB runs code
- content/settings/base.json 2.4 KB
- package.json 558 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 169 lines · 133 tokens per session scan A 9f233b7d1a1f
kelly-legal-firm-radar is a skill published in the GitHub repository mr-kelly/skills (5 stars, last pushed today), licensed MIT. It adds 133 tokens to every session and 2,880 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
dependency-audit
Assesses what a project depends on — known vulnerabilities, licence obligations, abandoned packages, and supply chain risk. Use this whenever the user asks what their dependencies look like, mentions a CVE or security advisory, needs a licence review, is evaluating whether to adopt a library, or has a dependency tree…
market-research-workflow
Trigger for: federal acquisition market research; FAR Part 10 reports; refreshing an existing market research report; analyzing commerciality, competition, small-business availability, contract type, consolidation, prior awards, vendors, or market conditions; or preparing supported findings for a Pre-Award Agent. A…
ot-cost-analysis
Trigger for: Other Transaction or OT should-cost, cost estimate, cost-share analysis, milestone pricing, funding profile, proposed-price comparison, prototype price analysis, research OT budget, production follow-on OT estimate, or OT price-reasonableness support under 10 U.S.C. 4021 or 4022. Build auditable…
acquisition-policy-workflow
Trigger for: explaining current FAR, DFARS, or agency-supplement text; determining documented acquisition-policy status for an agency and FAR part; comparing codified text, RFO model text, and agency deviations; tracing acquisition rulemaking; finding procurement comment periods; analyzing public comments; refreshing…
ot-project-description-builder
Trigger for: OT project description, OTA scope, Research OT under 10 U.S.C. 4021, Prototype OT under 10 U.S.C. 4022, follow-on production scope under 10 U.S.C. 4022(f), milestone-based project scope, prototype objective, phase or go/no-go structure, BAA white-paper conversion, SOO conversion, transition planning, or…
sow-pws-builder
Trigger for: writing, revising, converting, or descoping a federal Statement of Work, Performance Work Statement, SOW, PWS, or SOO; develop executable requirements; define contract scope; create measurable performance standards; or prepare requirements before an IGCE. Produce a contract-file-ready .docx plus separate…