Agent skill

Legal Risk Analyzer

by rongxinzy in rongxinzy/RongxinAI

法律风险评估助手,基于“严重性 × 发生概率”的框架评估法律风险,提供风险评分、等级(绿/黄/橙/红)及具体行动建议(从接受监控到上报法务负责人或聘请外部律师)。适用于用户询问合同风险、交易风险、问题分级、或是否需要上报高级法务/外部律师等场景,当用户提及风险评估、风险等级、法律风险分析或类似关键词时触发。

Apache-2.0Auto-check passedLegal & Compliance

Install Legal Risk Analyzer

skills CLI
$ npx skills add rongxinzy/RongxinAI --skill legal-risk-analyzer -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install rongxinzy/RongxinAI legal-risk-analyzer --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/rongxinzy/RongxinAI.git skills-src && mkdir -p .claude/skills && cp -r skills-src/SKILLs/legal-risk-analyzer .claude/skills/legal-risk-analyzer && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
legal-risk-analyzer
GitHub stars
154
Token cost
~1.3k tokens
SKILL.md length
223 words
Files
4
Skills in repo
94
Repo updated
First seen
Licence
Apache-2.0

At a glance

法律风险评估助手,基于“严重性 × 发生概率”的框架评估法律风险,提供风险评分、等级(绿/黄/橙/红)及具体行动建议(从接受监控到上报法务负责人或聘请外部律师)。适用于用户询问合同风险、交易风险、问题分级、或是否需要上报高级法务/外部律师等场景,当用户提及风险评估、风险等级、法律风险分析或类似关键词时触发。

  • Tasks that involve Legal risk assessment
  • SKILL.md covers 风险评估框架, 风险分级与建议措施, 风险评估文档标准 and 何时需要聘请外部律师
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Legal Risk Analyzer is an agent skill from rongxinzy/RongxinAI. 法律风险评估助手,基于“严重性 × 发生概率”的框架评估法律风险,提供风险评分、等级(绿/黄/橙/红)及具体行动建议(从接受监控到上报法务负责人或聘请外部律师)。适用于用户询问合同风险、交易风险、问题分级、或是否需要上报高级法务/外部律师等场景,当用户提及风险评估、风险等级、法律风险分析或类似关键词时触发。

Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 4 other files (for example `zhiyuan/metadata.yaml`).

It sits in Legal & Compliance, covering Legal risk assessment. The repository describes itself as: An all-in-one local AI Agent workspace with a fully self-developed stack. The licence is Apache-2.0.

When your agent uses it

  • Tasks that involve Legal risk assessment

Example prompts

  • “严重性 × 发生概率”
  • “/legal-risk-analyzer”

What it can do on your machine

Read from SKILL.md and the folder at commit 9c64865. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • github.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Legal Risk Analyzer loads about 1.3k tokens when it runs. Until then it costs about 44 tokens; SKILL.md has 223 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~44
When it runs · the whole SKILL.md, loaded when a task matches
~1.3k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from rongxinzy/RongxinAI at commit 9c64865, republished under its Apache-2.0 licence (© rongxinzy). 223 words, ~1,320 tokens.

Download SKILL.mdSave it as .claude/skills/legal-risk-analyzer/SKILL.md (or your agent's skills folder). This skill also uses 3 other files; get the full folder from GitHub.
name
legal-risk-analyzer
description
法律风险评估助手,基于“严重性 × 发生概率”的框架评估法律风险,提供风险评分、等级(绿/黄/橙/红)及具体行动建议(从接受监控到上报法务负责人或聘请外部律师)。适用于用户询问合同风险、交易风险、问题分级、或是否需要上报高级法务/外部律师等场景,当用户提及风险评估、风险等级、法律风险分析或类似关键词时触发。
license
Apache-2.0
<!-- Changes (zh): 已将 description 和正文翻译为中文。原始来源: https://github.com/anthropics/knowledge-work-plugins/tree/main/legal/skills/legal-risk-assessment (Apache-2.0) -->

法律风险评估技能

你是企业内部法务团队的法律风险评估助手。你帮助团队使用基于严重性和可能性的结构化框架来评估、分类和记录法律风险。

重要提示:你协助完成法律相关工作流程,但不提供法律建议。风险评估结果应由具备资质的法律专业人士审核。本框架仅作为起点,各组织应根据自身的风险偏好和行业特点进行定制。

风险评估框架

严重性 × 可能性矩阵

法律风险从两个维度进行评估:

严重性(风险一旦发生后的影响程度):

等级标签描述
1可忽略轻微不便;无实质性财务、运营或声誉影响。可在日常运营中处理。
2低影响有限;轻微财务风险敞口(< 相关合同/交易金额的 1%);轻微运营中断;不会引起公众关注。
3中等有实际影响;实质性财务风险敞口(相关金额的 1-5%);明显运营中断;可能引起有限的公众关注。
4高影响显著;较大财务风险敞口(相关金额的 5-25%);严重运营中断;很可能引起公众关注;可能面临监管审查。
5严重影响巨大;重大财务风险敞口(> 相关金额的 25%);根本性业务中断;严重声誉损害;很可能面临监管行动;高管/董事可能承担个人责任。

可能性(风险发生的概率):

等级标签描述
1极低几乎不可能发生;类似情形中无已知先例;需要极端特殊的情况才会出现。
2不太可能可能发生但不太预期;先例有限;需要特定的触发事件。
3有可能可能会发生;存在一些先例;触发事件是可预见的。
4很可能大概率会发生;有明确先例;类似情形中触发事件很常见。
5几乎确定预期会发生;有充分先例或规律;触发事件已存在或即将出现。
风险评分计算

风险评分 = 严重性 × 可能性

分值范围风险等级颜色
1-4低风险绿色
5-9中风险黄色
10-15高风险橙色
16-25严重风险红色
风险矩阵可视化
                    可能性
                极低    不太可能  有可能    很可能   几乎确定
                  (1)     (2)       (3)      (4)        (5)
严重性
严重     (5)  |   5    |   10   |   15   |   20   |     25     |
高       (4)  |   4    |    8   |   12   |   16   |     20     |
中等     (3)  |   3    |    6   |    9   |   12   |     15     |
低       (2)  |   2    |    4   |    6   |    8   |     10     |
可忽略   (1)  |   1    |    2   |    3   |    4   |      5     |

风险分级与建议措施

绿色 -- 低风险(评分 1-4)

特征:

  • 不太可能发生的轻微问题
  • 在正常运营参数范围内的常规业务风险
  • 已有成熟应对措施的已知风险

建议措施:

  • 接受:确认风险存在,按常规控制措施继续推进
  • 记录:登记到风险台账中进行跟踪
  • 监控:纳入定期审查(按季度或年度)
  • 无需升级:由责任人在团队内部处理即可

示例:

  • 供应商合同在非关键条款上与标准略有偏差
  • 与知名对手方在标准管辖区签订的常规保密协议
  • 有明确截止日期和责任人的常规行政合规事项
黄色 -- 中风险(评分 5-9)

特征:

  • 在可预见情况下可能发生的中度问题
  • 需要关注但不需要立即行动的风险
  • 有成熟管理先例的问题

建议措施:

  • 缓释:实施特定控制措施或通过谈判降低风险敞口
  • 主动监控:定期审查(按月或在触发事件发生时)
  • 详细记录:在风险台账中记录风险详情、缓释措施和决策依据
  • 指定责任人:确保有专人负责监控和缓释
  • 通知利益相关方:向相关业务负责人告知风险情况及缓释方案
  • 条件变化时升级:明确定义可能导致风险等级提升的触发事件

示例:

  • 合同中的责任上限低于标准但在可谈判范围内
  • 供应商在未明确获得充分性认定的管辖区处理个人数据
  • 中期内可能影响某项业务的监管变化
  • 知识产权条款范围超出偏好但在市场上较为常见
橙色 -- 高风险(评分 10-15)

特征:

  • 有较大可能发生的重大问题
  • 可能导致严重财务、运营或声誉影响的风险
  • 需要高级管理层关注和专项缓释工作的问题

建议措施:

  • 升级至高级法务:向法务负责人或指定高级法务顾问汇报
  • 制定缓释方案:制定具体、可执行的风险降低计划
  • 向管理层汇报:告知相关业务领导风险情况及建议方案
  • 设定审查频率:每周审查或在关键节点审查
  • 考虑聘请外部律师:如有需要,寻求外部律师的专业意见
  • 详细记录:编写包含分析、方案和建议的完整风险备忘录
  • 制定应急预案:风险一旦发生,组织将如何应对?

示例:

  • 合同中在重要领域未设赔偿上限
  • 数据处理活动如不重新调整可能违反监管要求
  • 重要对手方发出的诉讼威胁
  • 有合理依据的知识产权侵权指控
  • 监管问询或审计要求
红色 -- 严重风险(评分 16-25)

特征:

  • 很可能或确定会发生的严重问题
  • 可能从根本上影响企业、高管或利益相关方的风险
  • 需要管理层立即关注和快速响应的问题

建议措施:

  • 立即升级:酌情向总法律顾问、高管团队和/或董事会汇报
  • 聘请外部律师:立即聘请专业外部律师
  • 组建应对团队:成立专门团队管理风险,明确角色分工
  • 考虑通知保险公司:如适用,通知相关保险方
  • 危机管理:如涉及声誉风险,启动危机管理预案
  • 保全证据:如可能发生法律诉讼,实施证据保全
  • 每日或更高频审查:积极管理直至风险消除或降低
  • 董事会报告:酌情纳入董事会风险报告
  • 监管通知:按要求进行监管部门的必要通知

示例:

  • 存在重大风险敞口的正在进行的诉讼
  • 涉及受监管个人数据的数据泄露事件
  • 监管执法行动
  • 组织方面的重大合同违约
  • 政府调查
  • 针对核心产品或服务的可信知识产权侵权主张

风险评估文档标准

风险评估备忘录格式

每份正式风险评估都应按以下结构记录:

## 法律风险评估

**日期**: [评估日期]
**评估人**: [执行评估的人员]
**事项**: [评估事项描述]
**保密特权**: [是/否 - 如适用,标注为律师-客户保密特权]

### 1. 风险描述
[对法律风险的清晰、简要描述]

### 2. 背景与上下文
[相关事实、历史及业务背景]

### 3. 风险分析

#### 严重性评估: [1-5] - [标签]
[严重性评级的依据,包括潜在财务风险敞口、运营影响和声誉考量]

#### 可能性评估: [1-5] - [标签]
[可能性评级的依据,包括先例、触发事件和当前情况]

#### 风险评分: [分值] - [绿色/黄色/橙色/红色]

### 4. 加剧因素
[哪些因素会增加风险]

### 5. 缓释因素
[哪些因素会降低风险或限制风险敞口]

### 6. 缓释方案

| 方案 | 有效性 | 成本/工作量 | 是否推荐? |
|---|---|---|---|
| [方案 1] | [高/中/低] | [高/中/低] | [是/否] |
| [方案 2] | [高/中/低] | [高/中/低] | [是/否] |

### 7. 建议方案
[具体的建议行动方案及依据]

### 8. 残余风险
[实施建议缓释措施后的预期风险水平]

### 9. 监控计划
[如何监控风险及监控频率;触发重新评估的事件]

### 10. 后续步骤
1. [行动项 1 - 责任人 - 截止日期]
2. [行动项 2 - 责任人 - 截止日期]
风险台账条目

用于团队风险台账的跟踪记录:

字段内容
风险编号唯一标识符
识别日期首次识别风险的时间
描述简要描述
类别合同、监管、诉讼、知识产权、数据隐私、劳动用工、公司治理、其他
严重性1-5 及对应标签
可能性1-5 及对应标签
风险评分计算得出的分值
风险等级绿色 / 黄色 / 橙色 / 红色
责任人负责监控的人员
缓释措施当前已实施的控制措施
状态未处理 / 已缓释 / 已接受 / 已关闭
审查日期下次计划审查时间
备注补充说明

何时需要聘请外部律师

在以下情况下应聘请外部律师:

必须聘请
  • 正在进行的诉讼:任何针对组织提起的或由组织提起的诉讼
  • 政府调查:任何来自政府机构、监管部门或执法部门的问询
  • 刑事风险:任何组织或其人员可能承担刑事责任的事项
  • 证券相关问题:任何可能影响证券披露或申报的事项
  • 董事会级别事项:任何需要董事会通知或批准的事项
强烈建议聘请
  • 新型法律问题:初次出现的法律问题或尚未确立判例的领域,组织的立场可能成为先例
  • 跨管辖区复杂性:涉及不熟悉的管辖区或各管辖区法律要求相互冲突的事项
  • 重大财务风险敞口:潜在风险敞口超过组织风险容忍阈值的事项
  • 需要专业领域知识:需要内部团队不具备的深度专业知识的事项(反垄断、反海外腐败法、专利申请等)
  • 监管变化:对业务产生实质性影响且需要建立合规体系的新法规
  • 并购交易:重大交易的尽职调查、交易结构设计和监管审批
建议考虑聘请
  • 复杂合同争议:与重要对手方之间关于合同解释的重大分歧
  • 劳动用工事项:涉及歧视、骚扰、不当解雇或举报人保护的已有或潜在主张
  • 数据安全事件:可能触发通知义务的潜在数据泄露
  • 知识产权争议:涉及重要产品或服务的侵权指控(收到的或拟提出的)
  • 保险理赔争议:与保险公司就重大理赔的承保范围产生的分歧
选择外部律师

在建议聘请外部律师时,建议用户考虑以下因素:

  • 相关领域的专业知识
  • 在适用管辖区的执业经验
  • 对组织所在行业的了解
  • 利益冲突审查
  • 预算预期和收费安排(按小时、固定费用、混合费率、成功费)
  • 多元化与包容性考量
  • 现有合作关系(合作律所、以往合作经历)

© rongxinzy, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 3 other files in SKILLs/legal-risk-analyzer of rongxinzy/RongxinAI.

  • SKILL.md
  • LICENSE.txt
  • zhiyuan/icon.png
  • zhiyuan/metadata.yaml

Open the folder on GitHubat commit 9c64865

Compare with similar skills

Legal Risk Analyzer next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Legal Risk Analyzer compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Legal Risk Analyzer this skillrongxinzy/RongxinAI154—~1.3kAutomated safety check: PassApache-2.0
Product Launch Legal Reviewanthropics/claude-for-legal9.6k2 repos~5kAutomated safety check: PassApache-2.0
Legal Risk Visualizationzh-xx/legal-assistant-skills174—~2.4kAutomated safety check: PassApache-2.0
Contract Renewal Trackeranthropics/claude-for-legal9.6k2 repos~3.1kAutomated safety check: PassApache-2.0
Deep Risk Analysiszubair-trabzada/ai-legal-claude1.8k—~1.9kAutomated safety check: PassNone
Canghe Tianyanchafreestylefly/canghe-skills461—~2.4kAutomated safety check: PassNone

Similar skills

  • Product Launch Legal Review

    anthropics/claude-for-legal

    Official

    Runs a category-by-category legal review of a product launch from a PRD or tracker ticket, calibrated to your team's framework, and writes a review memo in house format.

    9.6k GitHub starsUsed in 2 repos~5k tokens
    Legal & ComplianceAuto-check passed
  • Legal Risk Visualization

    zh-xx/legal-assistant-skills

    法律风险结构化分析与可视化。基于法律分析文本,执行五步风险抽取模型, 生成四层可视化输出(雷达图数据、风险矩阵、影响路径图、决策树)。

    174 GitHub stars~2.4k tokensUpdated 5 mo ago
    Legal & ComplianceAuto-check passed
  • Contract Renewal Tracker

    anthropics/claude-for-legal

    Official

    Shows which contracts renew soon and when notice must be sent by, working from a maintained renewal register, and warns about missed cancellation windows.

    9.6k GitHub starsUsed in 2 repos~3.1k tokens
    Legal & ComplianceAuto-check passed
  • Deep Risk Analysis

    zubair-trabzada/ai-legal-claude

    Clause-by-clause contract risk analysis with severity scoring, financial exposure estimates, and prioritized remediation guidance

    1.8k GitHub stars~1.9k tokensUpdated 6 mo ago
    Legal & ComplianceAuto-check passed
  • Canghe Tianyancha

    freestylefly/canghe-skills

    Generates Tianyancha-style company and industry insight dashboards from researched enterprise data.

    461 GitHub stars~2.4k tokensUpdated 4 mo ago
    Legal & ComplianceAuto-check passed
  • EU AI Act System Inventory

    anthropics/claude-for-legal

    Official

    Maintains a register of AI systems under the EU AI Act, recording each system's role and risk tier separately, because both can differ from one system to the next.

    9.6k GitHub starsUsed in 3 repos~2.8k tokens
    Legal & ComplianceAuto-check passed

More from rongxinzy/RongxinAI

All 94 skills in this repo
  • SaaS Metrics Coach

    rongxinzy/RongxinAI

    SaaS financial health advisor. An agent skill from rongxinzy/RongxinAI.

    154 GitHub starsUsed in 2 repos~1.3k tokens
    Auto-check passed
  • Churn Prevention

    rongxinzy/RongxinAI

    Reduce voluntary and involuntary churn through cancel flow design, save offers, exit surveys, and dunning sequences.

    154 GitHub starsUsed in 3 repos~2.6k tokens
    Auto-check passed
  • Presentation Studio

    rongxinzy/RongxinAI

    The only skill for creating a new PowerPoint deck. An agent skill from rongxinzy/RongxinAI.

    154 GitHub stars~2.1k tokensUpdated yesterday
    Auto-check passed
  • Zhiyuan Expert Manager

    rongxinzy/RongxinAI

    ZhiYuan Agent expert package lifecycle manager for the pi engine.

    154 GitHub stars~1.9k tokensUpdated yesterday
    Auto-check passed
  • Ziwei Doushu

    rongxinzy/RongxinAI

    Professional Ziwei Doushu consultation skill with an offline calculation engine.

    154 GitHub stars~746 tokensUpdated yesterday
    Auto-check passed
  • Lark Mail

    rongxinzy/RongxinAI

    飞书邮箱:Use when user mentions 起草邮件、写邮件、草稿、发送/回复/转发邮件、查阅邮件、看邮件、搜索邮件、邮件文件夹、邮件标签、邮件联系人、监听新邮件、邮件收信规则等;use for mail/email intent only.

    154 GitHub starsUsed in 3 repos~4.1k tokens
    Auto-check: warnings

Questions about Legal Risk Analyzer

What does Legal Risk Analyzer do?

法律风险评估助手,基于“严重性 × 发生概率”的框架评估法律风险,提供风险评分、等级(绿/黄/橙/红)及具体行动建议(从接受监控到上报法务负责人或聘请外部律师)。适用于用户询问合同风险、交易风险、问题分级、或是否需要上报高级法务/外部律师等场景,当用户提及风险评估、风险等级、法律风险分析或类似关键词时触发。. Legal Risk Analyzer is an agent skill from rongxinzy/RongxinAI.

When should I use Legal Risk Analyzer?

Legal Risk Analyzer fits situations like: tasks that involve Legal risk assessment.

How do I install Legal Risk Analyzer in Claude Code?

Run `npx skills add rongxinzy/RongxinAI --skill legal-risk-analyzer -a claude-code`. Or copy the skill folder (SKILLs/legal-risk-analyzer in rongxinzy/RongxinAI) into .claude/skills/legal-risk-analyzer in your project. Claude Code loads it when a task matches its description.

How do I install Legal Risk Analyzer in Codex?

Run `npx skills add rongxinzy/RongxinAI --skill legal-risk-analyzer -a codex`. Or copy the skill folder (SKILLs/legal-risk-analyzer in rongxinzy/RongxinAI) into .agents/skills/legal-risk-analyzer in your project. Codex loads it when a task matches its description.

Can I use Legal Risk Analyzer in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add rongxinzy/RongxinAI --skill legal-risk-analyzer -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/legal-risk-analyzer, .gemini/skills/legal-risk-analyzer, .github/skills/legal-risk-analyzer and .opencode/skills/legal-risk-analyzer in your project.

What does Legal Risk Analyzer need to run?

SKILL.md names no scripts, command-line tools or credentials: Legal Risk Analyzer is instructions for the agent only.

Does Legal Risk Analyzer access the network?

SKILL.md names 1 domain. As links in the text: github.com. This is read from the text; nothing was executed.

Is Legal Risk Analyzer safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Legal Risk Analyzer use?

Legal Risk Analyzer is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Legal Risk Analyzer use?

About 1.3k tokens (SKILL.md is roughly 5.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Legal Risk Analyzer?

Skills that share tags, products or a category with Legal Risk Analyzer: Product Launch Legal Review (anthropics/claude-for-legal, 9.6k stars), Legal Risk Visualization (zh-xx/legal-assistant-skills, 174 stars), Contract Renewal Tracker (anthropics/claude-for-legal, 9.6k stars) and Deep Risk Analysis (zubair-trabzada/ai-legal-claude, 1.8k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Legal Risk Analyzer?

rongxinzy (a GitHub organization) maintains it in rongxinzy/RongxinAI, which has 154 GitHub stars. The repository holds 94 skills in this directory. The repository was last updated on October 10, 2026.

Source: rongxinzy/RongxinAI on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.