Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhou210712/claude-for-legal-ZH --skill launch-reviewgit clone --depth 1 https://github.com/zhou210712/claude-for-legal-ZHWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/launch-review)<a href="https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/launch-review"><img src="https://agentmods.dev/badge/skills/zhou210712/claude-for-legal-zh/launch-review/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/launch-review"><img src="https://agentmods.dev/badge/skills/zhou210712/claude-for-legal-zh/launch-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00073 | $0.04947 |
| Opus 5 | $0.00036 | $0.02474 |
| Sonnet 5 | $0.00015 | $0.00989 |
| Haiku 4.5 | $0.00007 | $0.00495 |
Grade A, and why
launch-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 252 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/launch-review
- 加载
~/.claude/plugins/config/claude-for-legal/product-legal/CLAUDE.md→ 框架 + 校准。如为占位符则停止。 - 获取PRD + 相关文档。如追踪器已连接，拉取工单和评论。
- 使用下述工作流遍历每个框架类别。
- 将每个发现对照校准表进行校准。全新 = 明确标记。
- 以内部格式输出审查备忘录。如已连接，发布摘要至工单。
- 交接：如涉及大量营销，转marketing-claims-review；如某发现需要深度分析，转feature-risk-assessment。
/product-legal:launch-review PROJ-1234
事项上下文
事项上下文。 检查实务级 CLAUDE.md 中的 ## 事项工作空间。如果 Enabled 为 ✗（企业法务用户的默认值），跳过本段其余内容——技能使用实务级上下文，事项机制不可见。如果已启用且无活跃事项，询问："这是哪个事项？运行 /product-legal:matter-workspace switch <事项简称> 或说 实务级。"加载活跃事项的 matter.md 获取事项特定上下文和覆盖规则。输出写入事项文件夹 ~/.claude/plugins/config/claude-for-legal/product-legal/matters/<事项简称>/。除非 跨事项上下文 为 开，否则绝不读取其他事项的文件。
发送目的地检查
在产出输出前，检查其去向。如果用户指定了目的地（频道、分发列表、对方、"所有人"），询问是否在保密范围内。公共频道、全公司列表、对方/对方律师、供应商和客户（对于工作成果）将导致保护丧失。当目的地显示在保密范围外时，予以标记并提供 (a) 仅供法务的保密版本，(b) 适合更广泛频道的净化版本，或 (c) 两者——不要默不作声地加上保密页眉，然后帮助粘贴到页眉无法保护的地方。参见本插件 CLAUDE.md 中的 ## 共享安全机制 → 发送目的地检查。
目的
阅读PRD，检查该团队框架中的每个类别，对照在此实际阻断什么进行校准（依据 ~/.claude/plugins/config/claude-for-legal/product-legal/CLAUDE.md），并以内部格式输出审查。目标：产品经理读完就知道上线前必须完成什么。
加载校准
读取 ~/.claude/plugins/config/claude-for-legal/product-legal/CLAUDE.md：
## 审查框架——需检查的类别## 风险校准——在这家公司什么阻断vs.什么是FYI告知## 产品上线审查流程——输出格式## 上报——何时转上级
校准表是本技能与通用检查表之间的区别。如果表说"新增数据采集→需个人信息保护影响评估，1-2天可上线"，不要写"这可能需要完整的数据保护影响评估和监管咨询"。匹配团队的实际操作。
工作流
第1步：获取输入
- PRD——来自文件、飞书文档或上线追踪工单
- 规格/设计文档——如有独立
- 营销计划——如有（如涉及大量营销，转交marketing-claims-review）
- 上线日期——用于紧迫性校准
- 上线追踪工单——如已连接，拉取以获取上下文和评论
如果飞书多维表格/钉钉/Teambition的MCP已连接，拉取工单历史——通常PRD未捕获的上下文在早期评论中。
第2步：理解上线内容
在检查表之前，用通俗语言回答：
- 这个东西做什么？
- 谁使用它——已有用户、新用户、新群体？
- 有什么是新的vs.什么是已有审查过的延伸？
- 有无新数据、新供应商、新宣传、新法域？
AI检测——在遍历框架前运行。 检查此次上线是否以任何形式使用AI：第三方模型、内部构建的模型、AI赋能的供应商功能、自动评分或分类、生成内容、推荐、预测。即使PRD未标注"AI"也要寻找——"智能""自动""个性化""生成""推荐"等词语是信号。
如检测到AI组件 → 标记，然后在遍历框架的同时运行 /ai-governance-legal:use-case-triage [功能]。以下第8类处理细节；此标记确保即使PRD含糊也绝不被跳过。
第3步：遍历框架
对 ~/.claude/plugins/config/claude-for-legal/product-legal/CLAUDE.md → 审查框架中的每个类别。如果团队没有，使用以下8类默认框架。类别是稳定的框架概念；在每个类别内，在校准严重程度之前，检索适用于产品领域、受众和法域的监管制度。在一个法域或领域是阻断的，可能在另一个是常规——~/.claude/plugins/config/claude-for-legal/product-legal/CLAUDE.md 捕获团队的校准。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 252 lines · 73 tokens per session scan A 8a4fccb8ef61
launch-review is a skill published in the GitHub repository zhou210712/claude-for-legal-ZH (212 stars, last pushed 4mo ago), licensed Apache-2.0. It adds 73 tokens to every session and 4,947 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
specification-writing
A workflow for writing complete patent specifications from patent claims and an invention disclosure. It adapts the document to a chosen jurisdiction, such as the US, Europe, or China.
regulatory-research-fallback
Fallback workflow for regulatory research when web extraction tools fail on government PDFs.
x-scorecard
OpenSSF Scorecard for assessing open source project security. Check security best practices and compliance. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
gesellschaftsrechtliche-satzungen-agb
Für Gesellschaftsrechtliche Satzungen AGB Abgrenzung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: gesellschaftsrechtliche-satzungen-agb.
memstack-business-gdpr
Use this skill when the user says 'GDPR', 'data protection', 'privacy compliance', 'DPA', 'DSAR', 'data subject request', 'cookie consent', 'privacy audit', 'CCPA', or asks 'do I need GDPR for this repo'. Scans the repository to detect what personal data is collected, classifies sensitivity, determines whether GDPR…
nda-review
Use when the user uploads or pastes a non-disclosure agreement and asks for review, redline, risk assessment, or a recommendation on whether to sign. Identifies missing standard protections, one-sided or unusual provisions, and operational issues; produces a structured report with severity ratings and citations to…