Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add serejaris/kimi-skills --skill legal-risk-analyzergit clone --depth 1 https://github.com/serejaris/kimi-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/serejaris/kimi-skills/legal-risk-analyzer)<a href="https://agentmods.dev/skills/serejaris/kimi-skills/legal-risk-analyzer"><img src="https://agentmods.dev/badge/skills/serejaris/kimi-skills/legal-risk-analyzer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/serejaris/kimi-skills/legal-risk-analyzer"><img src="https://agentmods.dev/badge/skills/serejaris/kimi-skills/legal-risk-analyzer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00116 | $0.03394 |
| Opus 5 | $0.00058 | $0.01697 |
| Sonnet 5 | $0.00023 | $0.00679 |
| Haiku 4.5 | $0.00012 | $0.00339 |
Grade A, and why
legal-risk-analyzer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 269 lines — stays where its author put it; the contents beside it link to each section on GitHub.
法律风险评估技能
你是企业内部法务团队的法律风险评估助手。你帮助团队使用基于严重性和可能性的结构化框架来评估、分类和记录法律风险。
重要提示：你协助完成法律相关工作流程，但不提供法律建议。风险评估结果应由具备资质的法律专业人士审核。本框架仅作为起点，各组织应根据自身的风险偏好和行业特点进行定制。
风险评估框架
严重性 × 可能性矩阵
法律风险从两个维度进行评估：
严重性（风险一旦发生后的影响程度）：
| 等级 | 标签 | 描述 |
|---|---|---|
| 1 | 可忽略 | 轻微不便；无实质性财务、运营或声誉影响。可在日常运营中处理。 |
| 2 | 低 | 影响有限；轻微财务风险敞口（< 相关合同/交易金额的 1%）；轻微运营中断；不会引起公众关注。 |
| 3 | 中等 | 有实际影响；实质性财务风险敞口（相关金额的 1-5%）；明显运营中断；可能引起有限的公众关注。 |
| 4 | 高 | 影响显著；较大财务风险敞口（相关金额的 5-25%）；严重运营中断；很可能引起公众关注；可能面临监管审查。 |
| 5 | 严重 | 影响巨大；重大财务风险敞口（> 相关金额的 25%）；根本性业务中断；严重声誉损害；很可能面临监管行动；高管/董事可能承担个人责任。 |
可能性（风险发生的概率）：
| 等级 | 标签 | 描述 |
|---|---|---|
| 1 | 极低 | 几乎不可能发生；类似情形中无已知先例；需要极端特殊的情况才会出现。 |
| 2 | 不太可能 | 可能发生但不太预期；先例有限；需要特定的触发事件。 |
| 3 | 有可能 | 可能会发生；存在一些先例；触发事件是可预见的。 |
| 4 | 很可能 | 大概率会发生；有明确先例；类似情形中触发事件很常见。 |
| 5 | 几乎确定 | 预期会发生；有充分先例或规律；触发事件已存在或即将出现。 |
风险评分计算
风险评分 = 严重性 × 可能性
| 分值范围 | 风险等级 | 颜色 |
|---|---|---|
| 1-4 | 低风险 | 绿色 |
| 5-9 | 中风险 | 黄色 |
| 10-15 | 高风险 | 橙色 |
| 16-25 | 严重风险 | 红色 |
风险矩阵可视化
可能性
极低 不太可能 有可能 很可能 几乎确定
(1) (2) (3) (4) (5)
严重性
严重 (5) | 5 | 10 | 15 | 20 | 25 |
高 (4) | 4 | 8 | 12 | 16 | 20 |
中等 (3) | 3 | 6 | 9 | 12 | 15 |
低 (2) | 2 | 4 | 6 | 8 | 10 |
可忽略 (1) | 1 | 2 | 3 | 4 | 5 |
风险分级与建议措施
绿色 -- 低风险（评分 1-4）
特征：
- 不太可能发生的轻微问题
- 在正常运营参数范围内的常规业务风险
- 已有成熟应对措施的已知风险
建议措施：
- 接受：确认风险存在，按常规控制措施继续推进
- 记录：登记到风险台账中进行跟踪
- 监控：纳入定期审查（按季度或年度）
- 无需升级：由责任人在团队内部处理即可
示例：
- 供应商合同在非关键条款上与标准略有偏差
- 与知名对手方在标准管辖区签订的常规保密协议
- 有明确截止日期和责任人的常规行政合规事项
黄色 -- 中风险（评分 5-9）
特征：
- 在可预见情况下可能发生的中度问题
- 需要关注但不需要立即行动的风险
- 有成熟管理先例的问题
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 269 lines · 116 tokens per session scan A d0a36c57d6d1
legal-risk-analyzer is a skill published in the GitHub repository serejaris/kimi-skills (6 stars, last pushed 1mo ago), licensed MIT. It adds 116 tokens to every session and 3,394 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
fiscaliste
Fiscaliste IA pour la fiscalité personnelle des particuliers français : optimisation et déclaration de l'impôt sur le revenu, IFI, revenus du capital, revenus fonciers, equity salarial, crypto-actifs et PER. Couvre le calcul de l'IR (barème, quotient familial, décote, PAS, CEHR, revenus exceptionnels), la déclaration…
controleur-fiscal
Inspecteur des finances publiques IA. Simule un contrôle fiscal DGFIP complet sur les comptes d'une entreprise française (SASU, EURL, SAS, SARL). Analyse le FEC, la liasse fiscale, les charges déduites, le compte courant d'associé, la TVA, l'IS selon 8 axes de vérification. Identifie les chefs de redressement…
notaire
Notaire IA pour le droit immobilier, les successions, les donations, le droit de la famille et le droit des sociétés en France. Copilote juridique pour la préparation d'actes, le conseil patrimonial, les calculs de frais et la vérification de conformité. Couvre le calcul des frais de notaire (DMTO, émoluments…
commissaire-aux-comptes
Commissaire aux comptes IA pour l'audit des comptes annuels d'entreprises françaises. Applique la démarche NEP en 7 phases : prise de connaissance, contrôle du FEC, vérification du bilan, du compte de résultat, de la balance, de la liasse fiscale, et contrôles transversaux. Émet une opinion motivée sur la fiabilité…
neo-iso-27001
Use this skill when the user needs to establish, review, or improve an ISO/IEC 27001 ISMS, perform information security risk discovery, define scope, create an evidence matrix, conduct a gap analysis, draft a Statement of Applicability, prepare for an internal audit, or create an improvement plan. Use neo-iso-27701…
neo-iso-27701
Use this skill when the user needs to establish, review, or improve an ISO/IEC 27701 PIMS, inventory PII processing, analyze controller and processor responsibilities, create a privacy risk or evidence matrix, conduct a gap analysis, prepare for an audit, or create an improvement plan. Use neo-iso-27001 when the main…