Crypto marketing runs into rule books in every jurisdiction it touches: MiCA in the EU, the FCA's financial-promotions regime in the UK, the SEC's retail-communications lines in the US, MAS in Singapore, VARA in Dubai — plus GDPR on the data side and platform ad policies on the creative side.
At NorthPoint we wrote those rules down as skills — one SKILL.md file each, plain Markdown, the rules plus the judgment notes plus an output format — and ran them internally. Now all twelve are public, in full, under MIT.
Repo: github.com/jukkablomberg/northpoint
Install
Everything at once:
npx skills add jukkablomberg/northpoint
One at a time (the --skill flag), or list first:
npx skills add jukkablomberg/northpoint --list
Claude Code users: /plugin marketplace add jukkablomberg/northpoint, then /plugin install <skill>.
No code, no account, no runtime. Claude.ai takes the file under Settings → Capabilities → Skills; Cursor takes it in .cursor/rules/; any other model takes it as a system prompt with the asset as the message.
What is in the twelve
| Skill | Size | What it does |
|---|---|---|
crypto-company-context |
context file | Run once per company, first: writes .agents/crypto-company.md — jurisdictions, licences, token status, claims inventory — which every other skill reads before it runs. |
mica-marketing-self-audit-pro |
40 rules | EU marketing under MiCA Title II–IV + ESMA guidance, with interpretive notes and rewrites. |
fca-financial-promotions-pro |
25 rules | UK financial promotions: s21 FSMA, COBS 4.12A, PERG 8, the Oct-2023 cryptoasset regime. |
gdpr-marketing-self-audit-pro |
30 rules | GDPR + ePrivacy for marketing: consent, cookie banners, forms, automation flows. |
sec-retail-communications-pro |
25 rules | US retail communications: Howey, s17(a), Rule 10b-5, s17(b) anti-touting. |
mas-marketing-self-audit-pro |
37 rules | Singapore DPT marketing under the Payment Services Act and MAS PS-G02. |
vara-marketing-self-audit-pro |
38 rules | Dubai/UAE promotions under the VARA Marketing Regulations 2023 and the Rulebooks. |
tge-launch-readiness-pro |
28 rules | One multi-jurisdiction pass over a token-launch surface: EU, UK, US, SG, UAE. |
ad-creative-compliance-pro |
32 rules | The visual layer: disclosure prominence, dark patterns, fake UI, platform and app-store bans. |
aeo-visibility-audit-pro |
12 rules | Whether AI answer engines cite you when asked about your category — and what is stopping them. |
mica-marketing-self-audit |
40 rules | The pre-flight checklist version of the MiCA rules — pass/fail per rule, no interpretive notes. |
crypto-cmo-ai-stack |
the stack + 5 rules | The tools used to run crypto marketing solo, the judgment layer on top, and what not to use AI for. |
The nine -pro packs add up to 267 rules. mica-marketing-self-audit and its -pro sibling are not duplicates: the first is the pass/fail pre-flight checklist, the second is the full audit engine with interpretive notes, rewrite patterns and a machine-readable output contract.
The one design decision worth copying
The first skill in the list is not a rule pack. crypto-company-context writes one facts file — which jurisdictions you market to, which licences you hold, what your token status is, every number you state publicly and where it comes from, a do-not-say list — and every other skill reads that file before it runs. So you answer "company, jurisdiction, licence" once, not on every asset. It is versioned with a changelog, like any other file an agent maintains.
If you publish skills of your own, this is the pattern I would keep: a context file first, rule packs second.
The line you must not delete
Every pack states, in its own words, that it is an operator-grade heuristic and not legal advice. That line is load-bearing. Fork the rules, change them, run them inside a commercial product — MIT allows all of it — but keep that sentence.
Where the rules came from
They are the rule sets behind the free checks on northpoint.fi/check — eleven checks, no signup, paste an asset and get a verdict — published so nobody has to take the checks on faith. Full list, with per-skill pages: northpoint.fi/skills.
Attribution is a request, not a licence condition: Rules from NorthPoint — https://northpoint.fi.
Issues are welcome when something is factually wrong, out of date or broken. Pull requests that change the substance of a rule are unlikely to be merged — fork instead.
— Jukka Blomberg, ex-CMO at two international crypto exchanges (LocalBitcoins, NoOnes), now running growth for crypto and fintech companies through NorthPoint.
Top comments (0)