Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhanglunet/qcc --skill qcc-ownership-tracegit clone --depth 1 https://github.com/zhanglunet/qccWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhanglunet/qcc/qcc-ownership-trace)<a href="https://agentmods.dev/skills/zhanglunet/qcc/qcc-ownership-trace"><img src="https://agentmods.dev/badge/skills/zhanglunet/qcc/qcc-ownership-trace/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhanglunet/qcc/qcc-ownership-trace"><img src="https://agentmods.dev/badge/skills/zhanglunet/qcc/qcc-ownership-trace.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00231 | $0.01199 |
| Opus 5 | $0.00115 | $0.00600 |
| Sonnet 5 | $0.00046 | $0.00240 |
| Haiku 4.5 | $0.00023 | $0.00120 |
Grade A, and why
qcc-ownership-trace scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
qcc-ownership-trace — 股权 / 实控 / UBO 穿透
何时用
- KYB AML 合规:必须识别持股 ≥25% 的最终自然人受益所有人
- 关联交易识别 / 关联方清单
- M&A:确认标的最终实控人是否是宣称的同一人
- 监测股东变更(套现 / 引战 / 员工持股平台调整)
- 看一家公司的"集团版图"
不用的场景
- 只想知道法代的对外投资 →
qcc-executive-background(它有get_executive_investments) - 港股 / A 股上市公司的公众持股结构 → 用监管公告 / 招股书,QCC 工商数据只有境内 OpCo 股东
- 历史层级股东追溯 → 部分在
historyserver(目前账户拿不到)
调用流程
步骤 0:qcc-anchor → USCC
步骤 1-5(均用 USCC,可并行):
| 序 | tool | 关键字段 | 何时不可省 |
|---|---|---|---|
| 1 | get_actual_controller |
实控人姓名 / 直接持股 / 表决权 | 任何"谁控制"问题 |
| 2 | get_beneficial_owners |
UBO 自然人 / 受益类型 / 最终受益股份 / 形成日期 | AML / 合规审查 |
| 3 | get_shareholder_info |
一层股东 / 持股 / 认缴 / 实缴 | 看直接股东(含法人股东 / LP) |
| 4 | get_external_investments |
被投企业 / 持股 / 认缴出资 | 集团版图 / 子公司清单 |
| 5 | get_change_records |
41 类变更记录(自动聚合) | 看股权 / 资本变动时间线 |
三个工具的区别(高频混淆 — 看清楚再选)
| 问题 | 选哪个 |
|---|---|
| "谁控制这家公司"(可能法人) | get_actual_controller |
| "最终受益自然人是谁"(AML) | get_beneficial_owners |
| "有哪些股东" | get_shareholder_info |
❌ 不要为了"保险"三个都调一遍 —— actual_controller 已完成穿透分析,beneficial_owners 已 25%+ 过滤,重复调浪费配额。
输出契约
controller:
name: str
direct_pct: float # 直接持股 %
voting_pct: float # 表决权 %
ubo: # AML 口径
- name: str
benefit_pct: float
voting_pct: float
formation_date: str
role: str # 法定代表人 / 董事长 等
shareholders: # 一层直接股东
- name: str
pct: float
subscribed: str
paid: str
investments: # 对外投资
- target: str
pct: float
amount: str
status: str
changes: # 变更记录(聚合)
- date: str
type: str # 股东 / 经营范围 / 法代 等
before: str
after: str
风控速读规则(给 Agent 用)
跑完后,Agent 应自动 flag 这些信号:
- ⚠️ 近 12 个月股东大变(整体退出 ≥ 10%)→ 高优关注
- ⚠️ UBO 在多家子公司同时是 UBO → 关联交易关注
- ⚠️ 实控人与法定代表人不一致 → 影子控制可能
- ⚠️ 一层股东中有"X米企业管理合伙(有限合伙)"批量出现 → 员工持股平台(正常),但 LP/GP 结构需另查
- ⚠️ 对外投资有"金融科技""支付""小贷""典当""融资租赁"字样 → 金融牌照,需另跑监管审查
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 90 lines · 231 tokens per session scan A b283c8533172
qcc-ownership-trace is a skill published in the GitHub repository zhanglunet/qcc (2 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 231 tokens to every session and 1,199 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
agb-bei-kreditvertraegen-verbraucherdarlehen
Für AGB bei Kreditverträgen Verbraucherdarlehen: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
agb-in-kapitalanlagen-effektenhandel
Für AGB in Kapitalanlagen Effektenhandel: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt.
mahngebuehren-und-zinsanpassung-agb
Für Mahngebühren und Zinsanpassung AGB: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Berechnungstabelle mit Annahmen und Kontrollfragen.
byted-customer-service-compliance
Check refund, complaint, and sensitive customer-service actions against financial-service policy. Use before creating refund work orders, promising settlement times, exposing account data, or responding to complaints.
regulatory-analysis
Analyzes documents and processes against FINRA, SEC, Federal Reserve, and CFPB regulatory frameworks. Identifies compliance gaps, classifies findings by severity, and recommends remediation. Use when performing compliance audits, regulatory reviews, gap analyses, or verifying policy adherence to financial regulations.
document-review
Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the user mentions compliance checks, financial audits, or document verification.