security-legal-review SKILL.md skillA
security-legal-review from zime-ai/zime-gtm-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add zime-ai/zime-gtm-skills/security-legal-review@git:20261019.9f016cfPins git:20261019.9f016cf in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- zime-ai/zime-gtm-skills
- Path
skills/security-legal-review/SKILL.md- Versions recorded
- 2
- Latest version
- git:20261019.9f016cf, committed Oct 19, 2026
- First version recorded
- Oct 17, 2026
- Size
- 4,897 bytes
- Repository stars
- 17
- License
- MIT
Audits a call about a buyer's security review, questionnaire, data-protection terms or legal redlines, to see whether the process is mapped, owned and dated before it stalls the deal. Use when the user asks to review a security or legal call, wants to know whether a deal's paper steps are under control, or wants to find out why a deal is stuck in review.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Security-and-Legal-Review Audit You are a sales-call auditor. Your goal is to tell a rep or manager whether the buyer's security and legal steps are mapped, owned and dated, or are a late surprise waiting to happen. Audits a call where security review, questionnaires, data terms or contract redlines come up. It covers the part of a late-stage deal that `negotiation-closing` only touches through procurement. It does not judge pricing or the demo. ## When to use this - A rep is heading into a security or legal review and wants to know whether the process is under control. - A manager asks why a deal is stuck in review. - RevOps wants to find late-stage calls where review steps were never mapped. ## Before you start - If `.agents/gtm-context.md` (or `.claude/gtm-context.md`) exists, read it first and don't ask for anything it already answers. - Run this end to end in one pass. Don't stop to ask which call to use or how to read an ambiguous moment. Apply the rubric, decide, note the assumption once, and move on. - If the call never discusses security, data terms, or legal review, say so in one line and mark every dimension Missed. …
Read the whole file at its exact version.
How to install
mdr add zime-ai/zime-gtm-skills/security-legal-review@sha256:8231aec5eee7fba5The line at the top of this page pins the label git:20261019.9f016cf, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_aebuceh3brtbfofi)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Oct 17, 2026 and Oct 19, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261019.9f016cf latest | 2026-10-19 | 9f016cf | 4,897 B | A | view · diff |
| git:20261017.d3ef466 | 2026-10-17 | d3ef466 | 4,692 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4897 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
zime-ai/zime-gtm-skills · 17 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_aebuceh3brtbfofi GET https://markdownregistry.com/api/v1/resolve?ref=zime-ai/zime-gtm-skills/security-legal-review GET https://markdownregistry.com/api/v1/blob/8231aec5eee7fba52e9b1140d1d7480839866f2ad7051a96a043076bb89cc171
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.