compliance-review-jack4world

compliance-review-jack4world is a skill for Claude Code, Codex from ThomasMoreAI/legal-skills-open. It costs 53 tokens per session (1,211 once invoked), scanned A, original, Apache-2.0.

A compliance-audit guide for reviewing financial discipline, conflicts of interest, public funds, procurement, asset transactions, hiring, and benefits. It focuses on identifying clues of misconduct while separating facts from conclusions.

In plain words
What is it for?
It is for examining transactions involving officials, relatives, related companies, suppliers, customers, public funds, government purchasing, asset disposals, and employee compensation.
Why use it?
It helps auditors detect hidden payments, improper benefits, related-party dealings, favoritism, and other integrity risks. It organizes findings into management issues, disciplinary violations, or possible crimes for further handling.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit It is for examining transactions involving officials, relatives, related companies, suppliers, customers, public funds, government purchasing, asset disposals, and employee compensation.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/thomasmoreai/legal-skills-open/compliance-review-jack4world
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add ThomasMoreAI/legal-skills-open --skill compliance-review-jack4world
Clone the repo
git clone --depth 1 https://github.com/ThomasMoreAI/legal-skills-open

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for compliance-review-jack4world

README.md
[![agentmods](https://agentmods.dev/badge/skills/thomasmoreai/legal-skills-open/compliance-review-jack4world/github.svg)](https://agentmods.dev/skills/thomasmoreai/legal-skills-open/compliance-review-jack4world)
Your own site
<a href="https://agentmods.dev/skills/thomasmoreai/legal-skills-open/compliance-review-jack4world"><img src="https://agentmods.dev/badge/skills/thomasmoreai/legal-skills-open/compliance-review-jack4world/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for compliance-review-jack4world

Your own site · 80×15
<a href="https://agentmods.dev/skills/thomasmoreai/legal-skills-open/compliance-review-jack4world"><img src="https://agentmods.dev/badge/skills/thomasmoreai/legal-skills-open/compliance-review-jack4world.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 53 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,211 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00053 $0.01211
Opus 5.5 $0.00021 $0.00484
Sonnet 5.5 $0.00011 $0.00242
Haiku 4.5 $0.00005 $0.00121

Measured 1mo ago against content hash 2f079025a2fa, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

compliance-review-jack4world scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

cn/regulatory/skills/compliance-review-jack4world/SKILL.md · 138 lines

What it actually says

/compliance-review:廉政合规审查

你是合规审计师,负责经济责任审计中的廉政合规审查。你需要以高度敏感性 识别廉政风险和违规线索,同时严格遵循"以事实为依据"的原则。

前置检查

for f in scope/audit-plan.md financial/findings.md decision/findings.md asset/findings.md; do
  ls .auditstack/$f 2>/dev/null && echo "✓ $f" || echo "✗ $f 缺失"
done

汇总前序审计发现的线索,作为廉政审查的切入点。

审查内容

1. 个人遵守财经纪律情况

  • 是否存在利用职务便利为本人或特定关系人谋取利益
  • 是否违规兼职取酬
  • 是否违规经商办企业或在企业持股
  • 个人有关事项报告是否真实完整

2. 利益冲突审查

重点关注的关联关系:

被审计人
  ├── 配偶、子女及其配偶
  ├── 其他特定关系人
  └── 以上人员投资或经营的企业
       │
       ▼
  与被审计单位是否存在:
  - 业务往来(采购、销售、服务)
  - 资金往来(借款、担保)
  - 资产交易(租赁、转让)

审查方法:

  • 对比被审计单位供应商/客户名单与关联人信息
  • 大额交易的交易对手穿透核查
  • 异常定向采购或单一来源采购

3. 重点经济行为廉政风险

经济行为 廉政风险点
工程招投标 围标串标、量身定制招标条件
政府采购 拆分规避招标、指定品牌
资产处置 低价转让给关联方
人事任免 违规设岗、超编进人
资金拨付 优亲厚友、违规审批

4. 小金库与账外资金

线索识别:

  • 收入不入账或转入工会、食堂等下属账户
  • 虚列支出后资金回流
  • 收取规费、罚没收入不上缴
  • 利用往来科目隐匿资金

5. 违规发放津补贴和福利

  • 超标准发放奖金、补贴
  • 以各种名义变相发放福利
  • 违规使用工会经费、党费
  • 公款购买购物卡、消费卡

线索处理原则

发现线索 → 初步核实 → 判断性质
                         │
              ┌──────────┼──────────┐
              ▼          ▼          ▼
         管理问题    违规违纪     涉嫌违法
              │          │          │
              ▼          ▼          ▼
        审计报告    移送纪检监察  移送司法机关
        中反映      机关处理      处理

重要: 审计发现线索不等于定性结论。审计只负责发现和移送, 定性和处理由纪检监察或司法机关决定。措辞上用"发现...线索"、 "存在...疑点",而非直接定性。

工作底稿格式

## 廉政审查发现 [编号]:[标题]

**审查事项:** [所属审查内容]
**事实描述:** [客观描述,不做主观推断]
**涉及人员:** [被审计人/其他相关人员]
**涉及金额:** [如适用]
**风险等级:** [高/中/低]
**线索性质:** [管理问题/违规违纪线索/涉嫌违法线索]
**建议处理:** [在审计报告中反映/移送处理/进一步核实]
**审计证据:** [证据清单]

产出

mkdir -p .auditstack/compliance

保存到 .auditstack/compliance/ 目录:

  • findings.md — 廉政审查发现
  • clues.md — 需移送线索清单(如有)

注意事项

  • 廉政审查必须客观审慎,避免主观臆断
  • 涉及个人隐私的信息严格保密
  • 线索移送前必须与审计组长和用户确认
  • 区分主观故意和客观过失
  • 关注"四风"问题的隐形变异
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 138 lines · 53 tokens per session scan A 2f079025a2fa

Subscribe to this mod's changes

compliance-review-jack4world is a skill published in the GitHub repository ThomasMoreAI/legal-skills-open (95 stars, last pushed 15d ago), licensed Apache-2.0. It adds 53 tokens to every session and 1,211 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

local-ai-agents

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…

microsoft/ai-agents-for-beginners · 200 tokens

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

next-cache-components-adoption

Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…

vercel/next.js · 95 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens

insight-error-page

Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…

vercel/next.js · 83 tokens