New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Official agent skill

Investigation Memo

by anthropics in anthropics/claude-for-legal

Draft or update the privileged investigation memo from the investigation log.

OfficialApache-2.0Auto-check passed

Install Investigation Memo

skills CLI
$ npx skills add anthropics/claude-for-legal --skill investigation-memo -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install anthropics/claude-for-legal investigation-memo --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/anthropics/claude-for-legal.git skills-src && mkdir -p .claude/skills && cp -r skills-src/employment-legal/skills/investigation-memo .claude/skills/investigation-memo && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
investigation-memo
GitHub stars
9.6k
Used in
2 other repos
Token cost
~288 tokens
SKILL.md length
96 words
Files
1
Skills in repo
147
Repo updated
First seen
Licence
Apache-2.0

At a glance

Draft or update the privileged investigation memo from the investigation log.

  • Works in 4 steps: Load the internal-investigation… → If drafting for the first time, warn if… → If updating, show what changed before… → …
  • An investigation is far enough along to write the first memo cut
  • SKILL.md covers Instructions and Examples
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Investigation Memo is an agent skill from anthropics/claude-for-legal, published by the product's own GitHub organization. Draft or update the privileged investigation memo from the investigation log. Use when an investigation is far enough along to write the first memo cut, or when new data has been added and the existing draft needs updating.

Its SKILL.md is about 290 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

The repository describes itself as: A suite of plugins for legal workflows. The licence is Apache-2.0.

When your agent uses it

  • An investigation is far enough along to write the first memo cut
  • New data has been added and the existing draft needs updating

Example prompts

  • “/investigation-memo”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Load the internal-investigation reference skill and run Mode 4 (Draft or update memo).
  2. If drafting for the first time, warn if high-priority sources are still
  3. If updating, show what changed before rewriting.
  4. All output is marked PRIVILEGED AND CONFIDENTIAL — ATTORNEY WORK PRODUCT.

What it can do on your machine

Read from SKILL.md and the folder at commit 4a6c651. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Investigation Memo loads about 288 tokens when it runs. Until then it costs about 61 tokens; SKILL.md has 96 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~61
When it runs · the whole SKILL.md, loaded when a task matches
~288

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from anthropics/claude-for-legal at commit 4a6c651, republished under its Apache-2.0 licence (© anthropics). 96 words, ~288 tokens.

Download SKILL.mdSave it as .claude/skills/investigation-memo/SKILL.md (or your agent's skills folder).
name
investigation-memo
description
Draft or update the privileged investigation memo from the investigation log. Use when an investigation is far enough along to write the first memo cut, or when new data has been added and the existing draft needs updating.
argument-hint
[matter name]

/investigation-memo

Drafts the first cut of the privileged investigation memo from the log, or updates an existing draft when new data has been added.

Instructions

  1. Load the internal-investigation reference skill and run Mode 4 (Draft or update memo).
  2. If drafting for the first time, warn if high-priority sources are still open on the checklist.
  3. If updating, show what changed before rewriting.
  4. All output is marked PRIVILEGED AND CONFIDENTIAL — ATTORNEY WORK PRODUCT.

Examples

/employment-legal:investigation-memo [matter name]
/employment-legal:investigation-memo [matter name]
(updates existing memo if one exists)

Detailed memo structure, credibility-assessment framework, and update rules live in the internal-investigation reference skill — load it before doing substantive work.

© anthropics, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in employment-legal/skills/investigation-memo of anthropics/claude-for-legal.

Open the folder on GitHubat commit 4a6c651

Used in 2 other repositories

We found 2 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 2 other GitHub owners. This page covers the copy in anthropics/claude-for-legal, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Investigation Memo next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Investigation Memo compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Investigation Memo this skillanthropics/claude-for-legal9.6k2 repos~288Automated safety check: PassApache-2.0
Investigating LogsPostHog/posthog40k—~2.1kAutomated safety check: PassCustom licence
Root Cause Investigationgarrytan/gstack136k—~13kAutomated safety check: NotesMIT
Osint Investigationaffaan-m/ECC276k—~5.7kAutomated safety check: PassCC-BY-SA-4.0
Growth Logaffaan-m/ECC277k1 repos~1.7kAutomated safety check: PassMIT
Clickhouse Logs Queriessupabase/supabase111k—~2.4kAutomated safety check: PassApache-2.0

Similar skills

  • Investigating Logs

    PostHog/posthog

    Official

    Investigate logs in a PostHog project: verify a service or deployment is healthy, explain an error spike, triage an incident, or understand what a log stream is saying.

    40k GitHub stars~2.1k tokensUpdated yesterday
    DatabasesAuto-check passed

  • Root Cause Investigation

    garrytan/gstack

    Debugs in four phases (investigate, analyze, hypothesize, implement) under one rule: no fix is made until the root cause is found.

    136k GitHub stars~13k tokensUpdated today
    DevelopmentAuto-check: notes

  • Osint Investigation

    affaan-m/ECC

    Sparse-clue OSINT investigation methodology for extracting overlooked leads, connecting fragmented evidence, and testing explanations across sources.

    276k GitHub stars~5.7k tokensUpdated yesterday
    SecurityAuto-check passed

  • Growth Log

    affaan-m/ECC

    Write growth log entries that extract reusable patterns from completed work — root cause, transferable rule, and a recognizable signal — instead of diary-style event narration, with a 4-8 sentence…

    277k GitHub starsUsed in 1 repo~1.7k tokens
    DevelopmentAuto-check passed

  • Clickhouse Logs Queries

    supabase/supabase

    Official

    Write, review, and migrate Supabase logs queries against the ClickHouse-backed logs table (the logs.all.otel analytics endpoint).

    111k GitHub stars~2.4k tokensUpdated yesterday
    DatabasesAuto-check passed

  • Performing Cloud Log Forensics With Athena

    mukul975/Anthropic-Cybersecurity-Skills

    Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation.

    34k GitHub stars~3.7k tokensUpdated 1 mo ago
    SecurityAuto-check passed

More from anthropics/claude-for-legal

All 147 skills in this repo

  • Legal Clinic Client Intake

    anthropics/claude-for-legal

    Official

    Structures a legal clinic client intake interview and produces a case summary with cross-area issue spotting, conflict flags and triage classification.

    9.6k GitHub starsUsed in 3 repos~3.2k tokens
    Auto-check passed

  • Supervisor Review Queue

    anthropics/claude-for-legal

    Official

    Holds student work in a queue for a legal clinic professor to approve, edit-then-approve or return before anything reaches clients or courts.

    9.6k GitHub starsUsed in 3 repos~1.1k tokens
    Auto-check passed

  • Tabular Document Review

    anthropics/claude-for-legal

    Official

    Builds a review grid with one row per document and one column per data point, each cell cited to a verbatim quote, built for M&A diligence and other batch reviews.

    9.6k GitHub starsUsed in 3 repos~4.3k tokens
    Auto-check passed

  • Product Launch Legal Review

    anthropics/claude-for-legal

    Official

    Runs a category-by-category legal review of a product launch from a PRD or tracker ticket, calibrated to your team's framework, and writes a review memo in house format.

    9.6k GitHub starsUsed in 2 repos~5k tokens
    Auto-check passed

  • Legal Skills Registry Browser

    anthropics/claude-for-legal

    Official

    Searches watched registries for community legal skills, shows matches with descriptions and offers the full SKILL.md before anything is installed.

    9.6k GitHub starsUsed in 2 repos~620 tokens
    Auto-check passed

  • Contract Renewal Tracker

    anthropics/claude-for-legal

    Official

    Shows which contracts renew soon and when notice must be sent by, working from a maintained renewal register, and warns about missed cancellation windows.

    9.6k GitHub starsUsed in 2 repos~3.1k tokens
    Auto-check passed

Questions about Investigation Memo

What does Investigation Memo do?

Draft or update the privileged investigation memo from the investigation log. Investigation Memo is an agent skill from anthropics/claude-for-legal, published by the product's own GitHub organization. Draft or update the privileged investigation memo from the investigation log.

When should I use Investigation Memo?

Investigation Memo fits situations like: an investigation is far enough along to write the first memo cut; new data has been added and the existing draft needs updating.

How do I install Investigation Memo in Claude Code?

Run `npx skills add anthropics/claude-for-legal --skill investigation-memo -a claude-code`. Or copy the skill folder (employment-legal/skills/investigation-memo in anthropics/claude-for-legal) into .claude/skills/investigation-memo in your project. Claude Code loads it when a task matches its description.

How do I install Investigation Memo in Codex?

Run `npx skills add anthropics/claude-for-legal --skill investigation-memo -a codex`. Or copy the skill folder (employment-legal/skills/investigation-memo in anthropics/claude-for-legal) into .agents/skills/investigation-memo in your project. Codex loads it when a task matches its description.

Can I use Investigation Memo in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add anthropics/claude-for-legal --skill investigation-memo -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/investigation-memo, .gemini/skills/investigation-memo, .github/skills/investigation-memo and .opencode/skills/investigation-memo in your project.

What does Investigation Memo need to run?

SKILL.md names no scripts, command-line tools or credentials: Investigation Memo is instructions for the agent only.

Does Investigation Memo access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Investigation Memo safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Investigation Memo use?

Investigation Memo is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Investigation Memo use?

About 288 tokens (SKILL.md is roughly 1.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Investigation Memo?

Skills that share tags, products or a category with Investigation Memo: Investigating Logs (PostHog/posthog, 40k stars), Root Cause Investigation (garrytan/gstack, 136k stars), Osint Investigation (affaan-m/ECC, 276k stars) and Growth Log (affaan-m/ECC, 277k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Investigation Memo?

anthropics (a GitHub organization, an official publisher) maintains it in anthropics/claude-for-legal, which has 9,633 GitHub stars. The repository holds 147 skills in this directory. The repository was last updated on September 29, 2026.

Source: anthropics/claude-for-legal on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.