cla_review SKILL.md skillA
cla_review from ducroo/sictic-ai is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add ducroo/sictic-ai/cla_review@git:20260930.e1b01eaPins git:20260930.e1b01ea in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- ducroo/sictic-ai
- Path
skills/cla_review/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260930.e1b01ea, committed Sep 30, 2026
- First version recorded
- Sep 22, 2026
- Size
- 9,075 bytes
- Repository stars
- 14
- License
- none declared
Review one convertible-loan term sheet from the lender's side, against the SECA CLA model term sheets and in the context of the startup's cap table, existing loans and SHA. Use before SICTIC members lend.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# CLA term sheet review Identify the term sheet, extract its terms, judge them for a lender and show what they do in this company. ## Inputs and outputs The async `cla_review(dataset_name, *, document=None, ticket=None, fresh=False)` returns one Markdown report in `list[InsightFile]`, named `cla-review-<startup>-<document>-<model>.md`, one per reviewed document. JSON intermediates (`identification`, `extraction`, `assessment`, `conversion`, `loan-context`, `reference`) live under `insights/cla-review/`; the audits live under `insights/batch-audit/` because `batch_audit` owns them. Every document-specific intermediate carries the document identity in its identifier (a readable slug of the full path plus a short digest, so `legal/a-ts.pdf` and `legal/a/ts.pdf` never share a path); the automatic identification is the one dataset-level artifact, its output being the document. `document` names the data-room path of the term sheet exactly (a bare basename is accepted and picks one file when several folders hold that name, with a concern in the report; a near miss is an error, never a substitute); omitted, the model selects the most recent CLA term sheet and executed loans are …
Read the whole file at its exact version.
How to install
mdr add ducroo/sictic-ai/cla_review@sha256:494b259665bded14The line at the top of this page pins the label git:20260930.e1b01ea, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_dhatxvdmgbnagu2r)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 22, 2026 and Sep 30, 2026, about one every 2 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260930.e1b01ea latest | 2026-09-30 | e1b01ea | 9,075 B | A | view · diff |
| git:20260927.f79e574 | 2026-09-27 | f79e574 | 8,257 B | A | view · diff |
| git:20260927.84e1b67 | 2026-09-27 | 84e1b67 | 8,241 B | A | view · diff |
| git:20260924.115e7c0 | 2026-09-24 | 115e7c0 | 6,387 B | A | view · diff |
| git:20260922.5f20e48 | 2026-09-22 | 5f20e48 | 5,304 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9075 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
ducroo/sictic-ai · 14 stars · license none declared · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_dhatxvdmgbnagu2r GET https://markdownregistry.com/api/v1/resolve?ref=ducroo/sictic-ai/cla_review GET https://markdownregistry.com/api/v1/blob/494b259665bded14ba1879bba16ef6895b5e01e0ecf46cbcbf0b4ac454ab9212
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.