tos-clause-scanner

tos-clause-scanner is a skill for Claude Code, Codex from zebbern/claude-code-guide. It costs 73 tokens per session (2,837 once invoked), scanned A, original, MIT.

A consumer-focused reviewer for Terms of Service, user agreements, and privacy policies. It identifies clauses that may affect a person's rights, data, payments, or liability.

In plain words
What is it for?
Use it to check for unfair terms, broad data permissions, automatic renewal, difficult cancellation, or limits on the provider's responsibility.
Why use it?
Legal agreements are often long and one-sided, making hidden risks difficult to spot. This turns them into a structured list of possible concerns.

Skill for Claude CodeCodex

About the project

Claude Code Guide is a reference collection for configuring and using Claude Code, Anthropic’s command-line coding agent. Developers use it to learn commands, skills, agents, MCP, automation, security, integrations, and troubleshooting. Its catalogue add-ons provide many of the documented skills and agents.

zebbern/claude-code-guide · 4,600 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/zebbern/claude-code-guide/tos-clause-scanner
Any agent
npx skills add zebbern/claude-code-guide --skill tos-clause-scanner
Clone the repo
git clone --depth 1 https://github.com/zebbern/claude-code-guide

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for tos-clause-scanner

README.md
[![agentmods](https://agentmods.dev/badge/skills/zebbern/claude-code-guide/tos-clause-scanner.svg)](https://agentmods.dev/skills/zebbern/claude-code-guide/tos-clause-scanner)
Your own site
<a href="https://agentmods.dev/skills/zebbern/claude-code-guide/tos-clause-scanner"><img src="https://agentmods.dev/badge/skills/zebbern/claude-code-guide/tos-clause-scanner.svg" alt="Measured on agentmods" height="20"></a>
Per session 73 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,837 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00073 $0.02837
Opus 5 $0.00036 $0.01418
Sonnet 5 $0.00015 $0.00567
Haiku 4.5 $0.00007 $0.00284

Measured yesterday against content hash 5d3f4c568217, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

tos-clause-scanner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/tos-clause-scanner/SKILL.md · 288 lines

How it starts

The opening of the file, as written. The whole thing — 288 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Terms of Service Auditor (Consumer Perspective)

Systematically audit the Terms of Service, User Agreements, and Privacy Policies of apps, SaaS products, and platforms from an ordinary consumer's standpoint. Identify clauses that may harm consumer rights and produce an actionable audit report.

Quick Start

Paste the terms text directly to the Agent or provide a file path. The Agent will automatically complete the audit and output a structured report.

Example prompts:

  • "Review this user agreement for any unfair or one-sided clauses"
  • "Analyze this app's privacy policy and flag any covert data authorizations"
  • "Does this ToS have auto-renewal traps?"

1. Audit Framework

1.1 Risk Category Definitions

The audit covers seven major risk categories, each with common problem patterns:

ID Risk Category Severity Description
R1 Unfair Clauses 🔴 High Clauses that exclude or restrict consumers' statutory rights
R2 Covert Data Authorization 🔴 High Data collection, sharing, or sale beyond what the service requires
R3 Auto-Renewal Traps 🟠 Medium-High Opaque auto-renewal mechanisms and cancellation barriers
R4 Unilateral Amendment Rights 🟠 Medium-High Platform reserves the right to modify terms without notice
R5 Excessive Liability Disclaimers 🟠 Medium-High Overbroad disclaimers and low liability caps
R6 Dispute Resolution Restrictions 🟡 Medium Mandatory arbitration, class-action waivers, jurisdiction constraints
R7 IP Overreach 🟡 Medium Excessive rights claimed over user-generated content

1.2 Typical Problem Patterns per Category

R1 Unfair Clauses

Look for these patterns:

  • Unilateral termination rights: Platform may terminate a user's account at any time without cause
  • Asymmetric breach liability: Users face heavy penalties for violations, but the platform's only remedy is a refund—or nothing at all
  • Irrevocable authorizations: Requiring "irrevocable," "perpetual," "worldwide" broad-scope grants from the user
  • Deemed consent: Continued use is treated as agreement to all terms with no option-by-option consent
  • "Final interpretation right" reserved by the platform

Read the full file on GitHub · 288 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 288 lines · 73 tokens per session scan A 5d3f4c568217

Subscribe to this mod's changes

tos-clause-scanner is a skill published in the GitHub repository zebbern/claude-code-guide (4,600 stars, last pushed yesterday), licensed MIT. It adds 73 tokens to every session and 2,837 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.