legal-compliance SKILL.md skillB
legal-compliance from open-octo/octo-agent is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add open-octo/octo-agent/legal-compliance@git:20260901.1936886Pins git:20260901.1936886 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- open-octo/octo-agent
- Path
internal/skills/experts/legal-compliance/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260901.1936886, committed Sep 1, 2026
- Size
- 7,189 bytes
- Repository stars
- 142
- License
- MIT
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Skill: legal-compliance 评估一项业务、产品功能或一次宣传活动是否符合中国大陆现行法律法规。产出是风险 点+等级+建议，不是"能不能做"的最终拍板——重大合规决策仍需法务/律师最终把关。 ## PIPL(个人信息保护法)合规自查清单 处理个人信息的产品/业务，逐项自查： ``` 【PIPL 合规自查】 □ 合法性基础：处理个人信息是否有合法依据(同意/合同必需/法定义务等) □ 告知义务：是否已按要求告知处理目的、方式、范围 □ 最小必要原则：收集的信息是否超出实现目的所必需的范围 □ 敏感个人信息单独同意：涉及敏感信息(生物识别、行踪轨迹、未成年人信息等)是否单独取得同意 □ 个人信息权利：是否支持用户查阅、复制、更正、删除、注销账号 □ 撤回同意：是否提供便捷的撤回同意渠道，撤回后是否停止相应处理 □ 委托处理：委托第三方处理个人信息是否有合规协议、是否监督受托方 □ 跨境传输：是否涉及个人信息出境，是否完成相应的安全评估/认证/标准合同备案 □ 安全措施：是否采取了与风险相适应的技术和管理安全措施 □ 合规审计：是否建立个人信息保护合规审计机制 □ 应急预案：是否制定个人信息安全事件应急预案 □ 保护负责人：处理个人信息达到规定数量的，是否指定个人信息保护负责人 □ 未成年人保护：涉及未成年人个人信息的，是否取得监护人同意并有专门保护措施 ``` 每一项标注状态（合规/部分合规/不合规/不适用）和依据，不合规/部分合规的项给出 具体整改建议，不要只打勾不给理由。 ## 产品上线审查 新功能/新产品上线前的合规扫描： ### 六步流程 1. **获取输入**——产品需求文档、页面文案、功能说明等实际材料，不凭描述臆测 2. **理解上线内容**——搞清楚这个功能实际做什么、面向谁、收集/处理什么数据 3. **按八类框架逐一检测**（见下） 4. **遍历八类框架**——不要只挑看起来相关的几类，容易漏掉不显眼的风险 5. **校准**——结合实际业务场景判断风险等级，不是机械打勾 6. **组装输出**——按下面的双输出格式产出 ### 八类审查框架 | 框架 | 检查什么 | |---|---| | 合同承诺 | 是否与已签合同/用户协议中的承诺矛盾 | | 个人信息保护法(PIPL) | 见上面的14项清单 | | 数据安全 | 数据分类分级、重要数据处理、数据出境（对应《数据安全法》） | | 知识产权 | 是否使用他人受保护的内容、素材授权是否齐全 | | 第三方合作 | 引入的第三方SDK/服务是否有对应的合规协议和披露 | | 行业监管 | 所属行业是否有专门监管规定（金融、医疗、教育等特殊行业） | | 营销宣传 | 见下面的营销合规审查 | …
Read the whole file at its exact version.
How to install
mdr add open-octo/octo-agent/legal-compliance@sha256:29025d26f9f3260cThe line at the top of this page pins the label git:20260901.1936886, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_5l773mlhukq7a7rh)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 1, 2026.
Audit of the latest version
- fail: Frontmatter declares a description
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Size between 200 bytes and 200 KB (7189 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
open-octo/octo-agent · 142 stars · license MIT · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_5l773mlhukq7a7rh GET https://markdownregistry.com/api/v1/resolve?ref=open-octo/octo-agent/legal-compliance GET https://markdownregistry.com/api/v1/blob/29025d26f9f3260cc8317c59313b7b2cd08b206605bab8dc434e81ee27f7165a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from open-octo/octo-agent
Every file in open-octo/octo-agent