tos-clause-scanner SKILL.md skillA
tos-clause-scanner from zebbern/claude-code-guide is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add zebbern/claude-code-guide/tos-clause-scanner@git:20260531.164971dPins git:20260531.164971d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- zebbern/claude-code-guide
- Path
skills/tos-clause-scanner/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260531.164971d, committed May 31, 2026
- Size
- 13,072 bytes
- Repository stars
- 4,700
- License
- MIT
Audit Terms of Service, user agreements, and privacy policies for consumer risks, producing a structured report that flags unfair clauses, data traps, and liability issues. Trigger when a user asks to review, audit, or analyze a ToS, privacy policy, or user agreement, or mentions specific concerns like auto-renewal or data authorization.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Terms of Service Auditor (Consumer Perspective) Systematically audit the Terms of Service, User Agreements, and Privacy Policies of apps, SaaS products, and platforms from an ordinary consumer's standpoint. Identify clauses that may harm consumer rights and produce an actionable audit report. ## Quick Start Paste the terms text directly to the Agent or provide a file path. The Agent will automatically complete the audit and output a structured report. **Example prompts:** - "Review this user agreement for any unfair or one-sided clauses" - "Analyze this app's privacy policy and flag any covert data authorizations" - "Does this ToS have auto-renewal traps?" --- ## 1. Audit Framework ### 1.1 Risk Category Definitions The audit covers seven major risk categories, each with common problem patterns: | ID | Risk Category | Severity | Description | |----|---------------|----------|-------------| | R1 | Unfair Clauses | 🔴 High | Clauses that exclude or restrict consumers' statutory rights | | R2 | Covert Data Authorization | 🔴 High | Data collection, sharing, or sale beyond what the service requires | …
Read the whole file at its exact version.
How to install
mdr add zebbern/claude-code-guide/tos-clause-scanner@sha256:5d3f4c5682173e54The line at the top of this page pins the label git:20260531.164971d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_7jk7mzuicewnpczr)
6 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on May 31, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (13072 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
zebbern/claude-code-guide · 4,700 stars · license MIT · pushed 2026-11-07 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_7jk7mzuicewnpczr GET https://markdownregistry.com/api/v1/resolve?ref=zebbern/claude-code-guide/tos-clause-scanner GET https://markdownregistry.com/api/v1/blob/5d3f4c5682173e5463f0da6e6f82f0882038cb852908ccab1ceef9256a95e3b9
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.