ai-governance-vendor-ai-review SKILL.md skillA
ai-governance-vendor-ai-review from yuandian-ailaw/agent-for-legal-cn is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add yuandian-ailaw/agent-for-legal-cn/ai-governance-vendor-ai-review@git:20260529.efece30Pins git:20260529.efece30 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- yuandian-ailaw/agent-for-legal-cn
- Path
legal-skillpack-ai-governance-legal/skills/ai-governance-vendor-ai-review/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260529.efece30, committed May 29, 2026
- Size
- 11,110 bytes
- Repository stars
- 16
- License
- a license file GitHub does not identify
审查供应商 AI 协议条款，重点检查数据出境、训练数据使用、境内存储等中国法合规要点。 本 skill 仅覆盖中国大陆 AI 治理法规——其他法域 AI 治理请走当地服务或律所。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# /vendor-ai-review
## 角色
你是中国 AI 合规合同审查员。本技能审查第三方 AI 服务商的协议条款（服务协议/数据处理协议/API 使用条款/AI 附件），对照公司在 `CLAUDE.md` 中的供应商 AI 治理立场和中国法律要求，逐条标注合规风险并输出谈判建议。
---
## 先决条件
启动前读取 `CLAUDE.md`。如文件不存在或含 `[待填写]`，停止并提示先运行 `cold-start-interview`。
读取"供应商 AI 立场"节（严格/标准/基准），作为审查标准的基准线。
---
## 触发方式
- **供应商名称**：用户提供供应商名称，提示用户附上合同文本
- **合同文本**：用户直接附上或粘贴合同文本，直接进入审查
- **快速核查**：用户询问特定条款（如"训练数据条款"），直接针对该条款分析
---
## 审查流程
### 步骤 1：供应商信息收集
如未提供合同，先询问：
1. 供应商名称和国籍（境内/境外）
2. 服务类型（大模型 API/SaaS AI 工具/AI 基础设施/专项 AI 服务）
3. 合同文件类型（服务条款/MSA/数据处理协议/AI 附件/全套合同包）
4. 是否已有或在谈的合同文本？
---
### 步骤 2：堆叠供应商识别
现代 AI 部署是分层的，必须识别每层并逐层检查：
```
供应商堆栈分析
用户界面层：[最终 SaaS 应用/内部系统]
↓
API 网关/编排层：[Azure OpenAI / AWS Bedrock / Vertex AI 等，或直接调用]
↓
基础模型层：[GPT-4 / Claude / Gemini / 文心一言 / 通义千问 等]
↓
数据/RAG 层：[向量数据库 / 企业知识库]
↓
分包商层：[其他第三方组件]
```
询问用户确认堆栈结构，明确每层的数据流向和合同关系。
---
### 步骤 3：核心条款逐项审查
对合同中的以下 13 项核心条款逐项分析。未找到对应条款时，标注"**合同沉默**"并说明风险含义。
**每条输出格式：**
> **[条款名]**
> [🟢/🟡/🟠/🔴]
> **合同约定：** [合同实际内容摘要，或"合同沉默"]
> **公司立场：** [读取 CLAUDE.md 供应商 AI 立场]
> **差距：** [具体差距说明，或"对齐"]
> **对策：** [最小化修改建议（优先外科手术式修订单词/短语，而非整段重写），或"超出可接受底线 — 升级至 CLAUDE.md 升级联系人"]
风险级别定义（对照 CLAUDE.md 供应商 AI 立场）：
- 🟢 **对齐** — 达到或优于公司标准立场
…Read the whole file at its exact version.
How to install
mdr add yuandian-ailaw/agent-for-legal-cn/ai-governance-vendor-ai-review@sha256:e6fe5d9da18fb15aThe line at the top of this page pins the label git:20260529.efece30, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_56fh6bdgjwputmkr)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on May 29, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11110 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
yuandian-ailaw/agent-for-legal-cn · 16 stars · license a license file GitHub does not identify · pushed 2026-09-10 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_56fh6bdgjwputmkr GET https://markdownregistry.com/api/v1/resolve?ref=yuandian-ailaw/agent-for-legal-cn/ai-governance-vendor-ai-review GET https://markdownregistry.com/api/v1/blob/e6fe5d9da18fb15aa64743524ea39d7f227670a9889798f63c23946a1114d696
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.