Client Legal Safety
SkillDev toolsClient legal-safety review for domains, diagnostics targets, probes, workflows, and jurisdiction risk.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Client Legal Safety skill
What this skill tells your AI
The instructions your AI receives, as published by po4yka/ripdpi in .agents/skills/client-legal-safety/SKILL.md and read by ahel’s review.
Conservative review workflow for what an end user may be exposed to by running the app, enabling a feature, or executing built-in diagnostics.
When To Use
- Shipping or editing diagnostics target lists
- Adding probe hosts, bootstrap endpoints, or service checks
- Deciding whether a blocked or politically sensitive domain should stay in-app
- Reviewing client-side risk in a specific jurisdiction
Required Standard
This is a current-law task. Always verify with live sources before concluding that a host or workflow is safe enough to ship.
Prefer primary or official sources:
publication.pravo.gov.ru- prosecutor / regulator / ministry sites (
genproc.gov.ru,rkn.gov.ru, etc.) - official statute databases (
consultant.ru,garant.ru) when needed for the current text of a law
Use secondary reporting only to locate a designation or enforcement event, then confirm with a primary or official source where possible.
Review Steps
- Identify the exact client action:
- passive inclusion in the app
- automatic reachability probe
- manual probe
- DNS lookup only
- service bootstrap / handshake
- download, promotion, or onboarding flow
- Enumerate every touched host:
- source generators
- shipped JSON/assets
- service/bootstrap targets
- tests and docs that may reintroduce the host later
- Classify each item with a conservative client-risk label:
safesensitiveunsafeneeds_local_counsel
- Recommend the lowest-risk product action:
- keep
- keep manual-only
- remove from automatic runs
- remove entirely
- replace with neutral controls
Conservative Rules
- Treat hosts tied to organizations designated as undesirable as
unsafefor client reachability probing. - Treat circumvention-tool bootstrap, download, or promotion hosts as at least
sensitive; move tounsafewhen current law or current enforcement makes client access materially risky. - Distinguish operational blocking from client-side liability. A blocked domain is not automatically unlawful to probe.
- When evidence is mixed or incomplete, bias toward removal from shipped default
diagnostics and mark the item
needs_local_counsel.
Output Format
Return a compact matrix with:
- host
- classification
- legal basis / enforcement signal
- recommended product action
- sources
If code changes are requested, update all of the following together:
- source-of-truth catalogs / generators
- shipped generated assets
- tests and docs that mention removed hosts
Non-Goals
- Do not give definitive legal advice for a user or company.
- Do not rely on stale training knowledge for current law.
Signals
- GitHub stars
- 69
- Forks
- 4
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
client-legal-safety- Source
- github.com/po4yka/ripdpi