Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhou210712/claude-for-legal-ZH --skill fto-triagegit clone --depth 1 https://github.com/zhou210712/claude-for-legal-ZHWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/fto-triage)<a href="https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/fto-triage"><img src="https://agentmods.dev/badge/skills/zhou210712/claude-for-legal-zh/fto-triage/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/fto-triage"><img src="https://agentmods.dev/badge/skills/zhou210712/claude-for-legal-zh/fto-triage.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00109 | $0.03338 |
| Opus 5 | $0.00055 | $0.01669 |
| Sonnet 5 | $0.00022 | $0.00668 |
| Haiku 4.5 | $0.00011 | $0.00334 |
Grade A, and why
fto-triage scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 237 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/fto-triage
这不是自由实施(FTO)法律意见。 正式FTO法律意见需要由执业专利律师基于全面检索、
完整的权利要求解释和逐要素侵权分析出具。专利侵权是严格责任(专利法第11条 [法条原文]);
故意侵权可能导致惩罚性赔偿(专利法第71条:可确定数额的一倍以上五倍以下 [法条原文])。
"未发现明显障碍专利"的结果意味着本次初检未发现——不意味产品可自由实施。
指令
- 读取
~/.claude/plugins/config/claude-for-legal/ip-legal/CLAUDE.md。如包含[占位符],停止并引导至/ip-legal:cold-start-interview。 - 遵循以下工作流。
- 运行录入(产品/工艺、技术细节、法域、已知专利、时间)。
- 如有专利检索连接器可用,运行初步专利检索。否则在输出中说明,并以用户提供的专利继续。
- 对2-5个最可能的专利,针对每项独立权利要求构建初步权利要求对照表——逐要素。
- 列出正式FTO研究会解决的开放问题。
- 将初检备忘录写入事项文件夹或实践输出文件夹。按角色冠以工作成果抬头。
- 以建议的后续步骤、故意性提示及非律师关口结束。
本技能绝不作出产品可自由实施的结论。若不确定,标注——由专利律师决定。
示例
/ip-legal:fto-triage "面向消费级可穿戴设备的端侧语音识别模型,中国市场首发"
这不是自由实施法律意见
插件中最响的护栏。在每个输出的顶部说这句话。不要遗漏。不要弱化。
这不是自由实施(FTO)法律意见。 FTO法律意见是专业的法律判断,通常由执业 专利律师基于全面检索、完整权利要求解释和对每项相关专利每项权利要求的逐要素 侵权分析出具。本次初检是对可能存在内容的首次结构化审查。"未发现明显障碍专利" 的结果意味着本次初检未发现——不意味产品可自由实施。专利侵权是严格责任 (专利法第11条);故意侵权可能招致惩罚性赔偿(专利法第71条:可确定数额的 一倍以上五倍以下)。是否制造、使用、销售或进口的决策是基于正式FTO研究和律师 判断的商业决策——而非基于本次初检。执业专利律师在任何人依赖此作出产品决策前进行评估。
低估障碍专利是单行道——产品上市、一年后被取证、惩罚性赔偿在桌上。高估是双行道——律师在审阅中缩小清单。始终留在双行道一侧。
关于故意性的说明
阅读本次初检意味着阅读关于专利的内容。在某些情况下,阅读关于专利的内容可能成为未来故意性分析的考虑因素。这是输出在律师使用时标记为保密的原因之一,也是非律师输出被框定为供律师审查的研究的原因之一。不要在保密渠道外讨论本次初检发现的具体专利。
事项上下文
事项上下文。 检查实践级 CLAUDE.md 中的 ## 事项工作区。如果 已启用 为 ✗,跳过。如果已启用且无活动事项,询问。专利FTO事项特别常见于需要隔离团队或增高保密级别的事项开启时。尊重事项的保密标记。
先加载实践档案
FTO初检前,读取实践档案。提取角色、注册地、专利律师联系人、可用集成和决策立场。
若配置文件含占位符,提示用户配置或使用临时模式。
录入
一次性询问:
我来做FTO初检。几个问题先:
- 产品、工艺或功能。 被制造、使用、销售或进口的是什么?通俗描述——技术本质,非营销话术。
- 技术细节。 任何架构图、权利要求相关规格、公开产品页面或技术文档可分享?(细节越多,初检越真实。)
- 法域。 将在哪里制造、使用、销售、许诺销售、进口?(根据专利法第11条,每个行为均为独立的侵权行为
[法条原文]。)- 已知专利。 是否有已在关注范围内的专利——竞争对手组合、已知标准必要专利池、已收到的警告函、工程师提到的东西?
- 时间。 离上市多近?如果是数月后,初检算早,规避设计还在桌面上。如果已在出货,我们处于控制下行风险模式。
等待回答。如果描述模糊,追问一次技术本质。
范围——仅发明和实用新型专利
本技能分析发明和实用新型专利。 如果关注列表中的专利是外观设计专利(专利号前缀为"外观设计"),标注并路由出去,不要做权利要求对照:
- 外观设计专利。 完全不同的测试——专利法第23条的新颖性和区别性标准,整体视觉效果,不需要权利要求对照表。路由至
infringement-triage外观设计分支和外观设计专利律师。外观设计专利不在本FTO初检中分析。 - 实用新型专利。 纳入分析——采用与发明专利相同的权利要求对照方法,但注意未经实质审查的特点(专利法第40条
[法条原文])。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 237 lines · 109 tokens per session scan A a9f58c433e0c
fto-triage is a skill published in the GitHub repository zhou210712/claude-for-legal-ZH (212 stars, last pushed 4mo ago), licensed Apache-2.0. It adds 109 tokens to every session and 3,338 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
specification-writing
A workflow for writing complete patent specifications from patent claims and an invention disclosure. It adapts the document to a chosen jurisdiction, such as the US, Europe, or China.
regulatory-research-fallback
Fallback workflow for regulatory research when web extraction tools fail on government PDFs.
x-scorecard
OpenSSF Scorecard for assessing open source project security. Check security best practices and compliance. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
gesellschaftsrechtliche-satzungen-agb
Für Gesellschaftsrechtliche Satzungen AGB Abgrenzung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: gesellschaftsrechtliche-satzungen-agb.
memstack-business-gdpr
Use this skill when the user says 'GDPR', 'data protection', 'privacy compliance', 'DPA', 'DSAR', 'data subject request', 'cookie consent', 'privacy audit', 'CCPA', or asks 'do I need GDPR for this repo'. Scans the repository to detect what personal data is collected, classifies sensitivity, determines whether GDPR…
nda-review
Use when the user uploads or pastes a non-disclosure agreement and asks for review, redline, risk assessment, or a recommendation on whether to sign. Identifies missing standard protections, one-sided or unusual provisions, and operational issues; produces a structured report with severity ratings and citations to…