Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ThomasMoreAI/legal-skills-open --skill legal-hold-zhou210712git clone --depth 1 https://github.com/ThomasMoreAI/legal-skills-openWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/thomasmoreai/legal-skills-open/legal-hold-zhou210712)<a href="https://agentmods.dev/skills/thomasmoreai/legal-skills-open/legal-hold-zhou210712"><img src="https://agentmods.dev/badge/skills/thomasmoreai/legal-skills-open/legal-hold-zhou210712/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/thomasmoreai/legal-skills-open/legal-hold-zhou210712"><img src="https://agentmods.dev/badge/skills/thomasmoreai/legal-skills-open/legal-hold-zhou210712.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00085 | $0.01129 |
| Opus 5 | $0.00043 | $0.00564 |
| Sonnet 5 | $0.00017 | $0.00226 |
| Haiku 4.5 | $0.00009 | $0.00113 |
Grade A, and why
legal-hold-zhou210712 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/legal-hold
- 如
--status(无 slug):读取案件日志,产生全案组合保全报告。 - 否则:加载
~/.claude/plugins/config/claude-for-legal/litigation-legal/matters/[slug]/matter.md+ 日志行。 - 加载
~/.claude/plugins/config/claude-for-legal/litigation-legal/CLAUDE.md→ 保密标记、保全通知模板。 - 按标记路由:
--issue:获取范围、保管人、日期范围、系统。起草保全通知。更新保全字段。--refresh:获取范围/保管人变更。起草下一版本。标记已离职保管人。--release:获取解除日期、留存指令。起草解除通知。
- 写入前确认。
证据保全通知
目的
证据保全是在中国民事诉讼中的关键步骤。不同于美国法的证据开示(discovery)制度,中国法下证据保全的核心法律依据为:
- 《民事诉讼法》第81条:在证据可能灭失或者以后难以取得的情况下,当事人可以在诉讼过程中向人民法院申请保全证据,人民法院也可以主动采取保全措施。
[法条原文] - 《民事诉讼法》司法解释第94-99条:证据保全的程序规定。
[法条原文]
此外,当事人内部为应对已知或可预见的诉讼,有义务采取措施防止相关证据被销毁或灭失——否则可能承担举证不能的后果。
模式
--issue—— 首次发出--refresh—— 定期更新确认--release—— 解除保全--status—— 跨案件组合报告
--issue —— 首次发出
输入:
- 范围——文件、数据、通信类型
- 保管人——可能持有相关材料的指定人员
- 日期范围——从何时开始保全
- 系统——邮件、即时通讯、文件共享、设备等
- 紧迫性——如已收到诉状或律师函,立即发出
起草保全通知,使用内部模板。
发送门禁(草案的收尾说明):
这是供律师审查的证据保全通知草案,不是可发出的通知。发出保全通知启动保全义务,通知本身可能在后续程序中作为证据被调取。有执业资格的律师审查、批准并发出。不要分发未经审查的草案。
--refresh —— 定期更新
更新频率:默认6个月。范围变更、保管人增减需重新确认。
已离职保管人: 如保管人已离职,标记为保全行动事项——离职员工文件和邮件归档需在IT层面保全。
--release —— 解除保全
通常在案件结束时。确认案件确实结束(非上诉中、非可能重启)。
--status —— 跨案件组合报告
读取案件日志,产生报告:
# 证据保全状态 —— [今天]
## 活跃保全
| 案件 | 发出日期 | 最后更新 | 下次更新 | 保管人 | 状态 |
|---|---|---|---|---|---|
## ⚠️ 注意
- **更新逾期:** [列表]
- **30天内需更新:** [列表]
- **活跃案件中保全未发出:** [列表]
- **已结案但保全仍活跃:** [列表——考虑解除]
本技能不做什么
- 强制执行保全。 它发出通知;IT/保管人执行保全。
- 自行决定范围。 技能从案件上下文建议范围;用户确认。
- 发送通知。 起草 .docx;用户按内部惯例发送。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 96 lines · 85 tokens per session scan A 26564ae97ece
legal-hold-zhou210712 is a skill published in the GitHub repository ThomasMoreAI/legal-skills-open (72 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 85 tokens to every session and 1,129 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
pia-generator
Generate structured privacy impact assessments so Claude can organize project privacy risks, controls, and decision points into a review-ready report.
audit-scope-checklist
Generate a scoped IT audit program with controls mapped to roles and compliance frameworks. Use this skill for audit planning, control checklist generation, and auditprogram.json creation.
compliance-checker
Compare system configuration evidence against common control frameworks and produce a concise compliance assessment with gaps and remediation priorities.
compliance-controls-playbook
Guide Claude through a structured compliance audit workflow covering framework selection, evidence planning, control testing, exception handling, and reporting.
evidence-tracker
Manage audit evidence requests, collection progress, and status reporting so Claude can keep audits organized and identify overdue or blocked evidence items.
consent-checker
Review privacy policy or notice text against common privacy frameworks so Claude can explain coverage gaps, strengths, and compliance priorities.