Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add zhou210712/claude-for-legal-ZH --skill portfolio-statusgit clone --depth 1 https://github.com/zhou210712/claude-for-legal-ZHWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/portfolio-status)<a href="https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/portfolio-status"><img src="https://agentmods.dev/badge/skills/zhou210712/claude-for-legal-zh/portfolio-status/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhou210712/claude-for-legal-zh/portfolio-status"><img src="https://agentmods.dev/badge/skills/zhou210712/claude-for-legal-zh/portfolio-status.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00067 | $0.01544 |
| Opus 5.5 | $0.00027 | $0.00618 |
| Sonnet 5.5 | $0.00013 | $0.00309 |
| Haiku 4.5 | $0.00007 | $0.00154 |
Grade A, and why
portfolio-status scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 124 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/portfolio-status
- 加载
~/.claude/plugins/config/claude-for-legal/litigation-legal/CLAUDE.md→ 风险校准（定义如何解读risk:字段）。 - 按以下工作流操作。
- 解析
~/.claude/plugins/config/claude-for-legal/litigation-legal/matters/_log.yaml。默认过滤已结案件（使用--all包含）。 - 生成汇总：风险分布、未来 14/30/60 天内到期节点、超过30天未更新案件、重要性汇总、阶段分布。
- 标注异常——所有标记为危急、
next_deadline已逾期、风险为中或高但未指定外聘律师的案件。
案件组合状态
目的
一次阅读回答：我手上有多少案件、什么需要关注、什么在滑落？输出适合速览——为在下个电话前只有三分钟的律师设计。
加载上下文
~/.claude/plugins/config/claude-for-legal/litigation-legal/matters/_log.yaml—— 真实来源~/.claude/plugins/config/claude-for-legal/litigation-legal/CLAUDE.md—— 风险校准（正确解读风险/重要性字段）
标记与过滤
默认：仅活跃案件（排除 status: closed）。
标记：
--all—— 包含已结案件--risk=high（或critical/medium/low）—— 按风险级别过滤--stale—— 仅last_updated> 30天的案件--type=employment—— 按案件类别过滤--owner=[姓名]—— 按业务/HR/公关负责人过滤
汇总
[工作成果标头——根据插件配置 ## 输出——因角色不同；见 `## 使用者`]
# 案件组合状态 —— [今天]
**活跃案件：** [N]
**已结（本年度）：** [N] *(仅使用 --all 时显示)*
---
## 按风险
| 风险 | 数量 | 案件 |
|---|---|---|
| 危急 | [N] | [代号] |
| 高 | [N] | [代号] |
| 中 | [N] | [仅数量——使用 `--risk=medium` 展开] |
| 低 | [N] | [仅数量] |
## 即将到期节点
| 期限内 | 案件 |
|---|---|
| 14天 | [代号 —— 节点 —— 简述] |
| 15–30天 | [...] |
| 31–60天 | [...] |
*逾期的 `next_deadline` 在下方单独标注。*
## 重要性
| 类别 | 数量 | 敞口合计（中位值） |
|---|---|---|
| 需计提 | [N] | [金额] |
| 已披露 | [N] | [金额] |
| 监控中 | [N] | — |
| 不适用 | [N] | — |
## 按阶段
[表格：起诉/答辩 / 证据交换 / 庭审 / 和解 / 上诉]
---
## 异常与标注
- **逾期节点：** [列出 next_deadline 已过的代号]
- **陈旧（>30天未更新）：** [列表]
- **利益冲突未解决：** [列出 conflicts.status 为 pending 或 not-run 的代号]
- **利益冲突已绕过（override 有效）：** [列出 conflicts.override.by 已填充的代号——在手动清除前永久标注]
- **高/危急风险但无外聘律师：** [列表]
- **已计提但 >60天未更新：** [列表] —— 计提重新校准可能已逾期
- **活跃诉讼中未发出证据保全：** [列表]
- **缺失字段：** [代号 → 字段]
异常规则
这些检查使本技能有用而非装饰性：
- 逾期节点：
next_deadline < 今天且status != closed - 陈旧：
last_updated < 今天 - 30天且status != closed - 利益冲突未解决：
conflicts.status in [pending, not-run]且status != closed3b. 利益冲突绕过有效：conflicts.override.by != null（永不自清除） - 高风险无覆盖：
risk in [high, critical]且outside_counsel.firm == null - 计提陈旧：
materiality == reserved且last_updated < 今天 - 60天 - 证据保全缺口： 活跃案件且
legal_hold.issued == false—— 保全义务在合理预期诉讼时即附着 - 缺失字段： 任何必填字段为空——
risk、materiality、status、opened、conflicts.status
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 124 lines · 67 tokens per session scan A 14c051058b6f
portfolio-status is a skill published in the GitHub repository zhou210712/claude-for-legal-ZH (238 stars, last pushed 5mo ago), licensed Apache-2.0. It adds 67 tokens to every session and 1,544 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
fto-triage
Freedom-to-operate triage — a structured first look at potentially blocking patents, not an FTO opinion. Use when a product, process, or feature is being evaluated for blocking patents, when asked whether anything stops a launch, or to build a claim-chart first pass against the most plausible patents before patent…
legal-hold
Issue, refresh, release, or report on legal holds — drafts the hold notice as .docx, updates legalhold fields in log.yaml, and calendars the next refresh. Use when the user says "issue a hold", "refresh hold", "release hold", or asks for a portfolio-wide hold status report.
specification-writing
A workflow for writing complete patent specifications from patent claims and an invention disclosure. It adapts the document to a chosen jurisdiction, such as the US, Europe, or China.
terms-of-service
Draft terms of service and a companion privacy notice matched to the product's form and feature modules, not legal advice, delivered as a Word document.
x-scorecard
OpenSSF Scorecard for assessing open source project security. Check security best practices and compliance. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
ai-risk-management
Apply the NIST AI Risk Management Framework (AI RMF 1.0) and adjacent guidance to AI / ML systems — model lifecycle governance, fairness and bias evaluation, robustness, transparency, accountability, third-party model risk, monitoring for drift, and AI incident response. Broader than prompt-injection (which is the…