Agent skill

Legal Compliance

by travisjneuman in travisjneuman/.claude

Legal and compliance expertise for corporate governance, contract analysis, regulatory compliance (SOX, GDPR, HIPAA), risk assessment, intellectual property, and litigation management.

MITAuto-check passedLegal & Compliance

Install Legal Compliance

skills CLI
$ npx skills add travisjneuman/.claude --skill legal-compliance -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install travisjneuman/.claude legal-compliance --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/travisjneuman/.claude.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/legal-compliance .claude/skills/legal-compliance && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
legal-compliance
GitHub stars
100
Token cost
~3.4k tokens
SKILL.md length
535 words
Files
2 (incl. references)
Skills in repo
17
Repo updated
First seen
Licence
MIT

At a glance

Legal and compliance expertise for corporate governance, contract analysis, regulatory compliance (SOX, GDPR, HIPAA), risk assessment, intellectual property, and litigation management.

  • Reviewing contracts
  • SKILL.md covers Corporate Governance, Regulatory Compliance, Contract Management and Intellectual Property, plus 4 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
  • Ensuring compliance

What it does

Legal Compliance is an agent skill from travisjneuman/.claude. Legal and compliance expertise for corporate governance, contract analysis, regulatory compliance (SOX, GDPR, HIPAA), risk assessment, intellectual property, and litigation management. Use when reviewing contracts, ensuring compliance, or managing legal risk.

Its SKILL.md is about 3.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/legal-compliance-excellence-skill.md`).

It sits in Legal & Compliance, covering Contract review, Healthcare and finance regulation and Intellectual property. The repository describes itself as: The Ultimate Claude Code Toolkit: 180 skills, 10 agents, 29 commands, 7 hooks, and 81 marketplace repos (11,000+ community skills). Drop-in ~/.claude config with a generated… The licence is MIT.

When your agent uses it

  • Reviewing contracts
  • Ensuring compliance
  • Managing legal risk

Example prompts

  • “/legal-compliance”

What it can do on your machine

Read from SKILL.md and the folder at commit 446a461. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Legal Compliance loads about 3.4k tokens when it runs, and up to ~31k if it reads all its reference files. Until then it costs about 69 tokens; SKILL.md has 535 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~69
When it runs · the whole SKILL.md, loaded when a task matches
~3.4k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~31k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from travisjneuman/.claude at commit 446a461, republished under its MIT licence (© travisjneuman). 535 words, ~3,382 tokens.

Download SKILL.mdSave it as .claude/skills/legal-compliance/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
legal-compliance
description
Legal and compliance expertise for corporate governance, contract analysis, regulatory compliance (SOX, GDPR, HIPAA), risk assessment, intellectual property, and litigation management. Use when reviewing contracts, ensuring compliance, or managing legal risk.

Comprehensive legal frameworks for governance, contracts, regulatory compliance, and risk management.

Corporate Governance

Board Structure & Responsibilities
BOARD COMPOSITION:
- Independent directors (majority required for NYSE/NASDAQ)
- Lead independent director
- Committee structure
- Board diversity requirements
- Skills matrix

KEY COMMITTEES:
1. Audit Committee (all independent)
2. Compensation Committee (all independent)
3. Nominating/Governance Committee (all independent)
4. Risk Committee (financial institutions)
Fiduciary Duties
DutyDefinitionKey Considerations
Duty of CareAct with reasonable prudenceInformed decisions, due diligence
Duty of LoyaltyAct in corporation's best interestAvoid conflicts, corporate opportunity
Duty of Good FaithAct honestly and fairlyNo intentional harm, follow law
Duty of DisclosureFull and fair disclosureMaterial information, no omissions
Business Judgment Rule
PROTECTION REQUIREMENTS:
1. Decision made in good faith
2. No personal interest in outcome
3. Reasonably informed decision
4. Rational belief action is in company's best interest

ENHANCED SCRUTINY (Revlon Duties):
- Triggered in change of control
- Duty to maximize shareholder value
- Active market check required

Regulatory Compliance

Sarbanes-Oxley (SOX) Compliance
KEY SECTIONS:

Section 302: CEO/CFO Certifications
- Certify financial statements
- Certify disclosure controls
- Report control deficiencies

Section 404: Internal Control Assessment
- Management assessment required
- External auditor attestation (accelerated filers)
- Material weakness disclosure

Section 906: Criminal Penalties
- Criminal certification of financial reports
- Up to $5M fine / 20 years imprisonment

COMPLIANCE FRAMEWORK:
- COSO Internal Control Framework
- Documentation of key controls
- Testing program (design + operating effectiveness)
- Deficiency evaluation process
- Remediation tracking
GDPR Compliance
RequirementDescriptionPenalties
Lawful BasisConsent, contract, legitimate interestUp to 4% global revenue
Data Subject RightsAccess, rectification, erasure, portabilityUp to 4% global revenue
Data Protection OfficerRequired for large-scale processingAdministrative fines
Breach Notification72 hours to authority, without undue delay to subjectsUp to 4% global revenue
Privacy by DesignBuilt-in privacy controlsUp to 4% global revenue
Data Processing AgreementsRequired with all processorsUp to 2% global revenue
HIPAA Compliance
PRIVACY RULE:
- Protected Health Information (PHI) protections
- Minimum necessary standard
- Patient rights (access, amendment)
- Business Associate Agreements

SECURITY RULE:
- Administrative safeguards
- Physical safeguards
- Technical safeguards
- Risk assessment requirement

BREACH NOTIFICATION:
- Individual notice within 60 days
- HHS notification (>500 individuals: immediate)
- Media notification if >500 in state

PENALTIES:
Tier 1: Unaware - $100-$50,000/violation
Tier 2: Reasonable cause - $1,000-$50,000/violation
Tier 3: Willful neglect (corrected) - $10,000-$50,000/violation
Tier 4: Willful neglect (uncorrected) - $50,000/violation
Anti-Corruption (FCPA/UK Bribery Act)
FCPA ELEMENTS:
Anti-Bribery:
- No payments to foreign officials
- For purpose of obtaining business
- Includes third-party payments

Books & Records:
- Accurate books and records
- Internal controls over assets
- Applies to all issuers

UK BRIBERY ACT:
- Broader than FCPA
- Includes commercial bribery
- Facilitation payments prohibited
- Adequate procedures defense

COMPLIANCE PROGRAM:
- Risk assessment by geography/business
- Third-party due diligence
- Training program
- Gift and hospitality policy
- M&A due diligence
- Reporting mechanism
- Audit and monitoring

Contract Management

Contract Review Checklist
ESSENTIAL TERMS:
- [ ] Parties correctly identified
- [ ] Scope clearly defined
- [ ] Price/payment terms
- [ ] Term and termination rights
- [ ] Representations and warranties
- [ ] Limitation of liability
- [ ] Indemnification
- [ ] Insurance requirements
- [ ] Confidentiality
- [ ] IP ownership/license
- [ ] Governing law
- [ ] Dispute resolution
- [ ] Assignment restrictions
- [ ] Force majeure
- [ ] Notice provisions
- [ ] Entire agreement clause
Key Contract Provisions
ProvisionPurposeNegotiation Points
Limitation of LiabilityCap damages exposureDirect vs. consequential, cap amount
IndemnificationAllocate third-party riskScope, procedure, caps
IP OwnershipDefine ownershipWork product, background IP, licenses
ConfidentialityProtect informationDefinition, term, exceptions
TerminationExit rightsFor cause vs. convenience, notice period
WarrantiesQuality assuranceScope, disclaimers, remedies
Contract Risk Matrix
Risk LevelContract ValueApproval Level
Low< $100KDepartment manager
Medium$100K - $1MDirector/VP
High$1M - $10MSVP/EVP
Critical> $10MC-Suite/Board

Intellectual Property

IP Portfolio Management
PATENT STRATEGY:
- Freedom to operate analysis
- Competitive patent landscape
- Filing strategy (utility, design, provisional)
- Geographic coverage
- Prosecution management
- Licensing opportunities
- Enforcement program

TRADEMARK STRATEGY:
- Brand clearance searches
- Registration program
- Monitoring and enforcement
- Domain name portfolio
- Social media handles

TRADE SECRET PROGRAM:
- Identification and classification
- Protection measures (physical, technical, contractual)
- Need-to-know access
- Exit interview protocols
IP Due Diligence (M&A)
AreaReview Items
PatentsOwnership, encumbrances, validity, infringement claims
TrademarksRegistrations, common law rights, oppositions
CopyrightsWork for hire, assignments, licenses
Trade SecretsProtection measures, potential misappropriation
LicensesInbound/outbound, change of control provisions
LitigationPending/threatened, settlements

Litigation Management

Litigation Hold Process
TRIGGER EVENTS:
- Receipt of complaint or demand letter
- Reasonable anticipation of litigation
- Government investigation notice
- Internal investigation findings

HOLD PROCESS:
1. Issue litigation hold notice
2. Identify custodians and data sources
3. Suspend routine destruction
4. Interview key custodians
5. Collect and preserve documents
6. Monitor compliance
7. Update as needed
8. Release when appropriate
Litigation Budget Management
PhaseActivitiesCost Factors
Pre-litigationInvestigation, demand lettersLimited
PleadingsComplaint, answer, motionsModerate
DiscoveryDocument production, depositionsHighest
Pre-trialExpert reports, motionsHigh
TrialPreparation, testimonyVery High
AppealBriefing, oral argumentModerate
Show full SKILL.md (202 more words)Show less
Settlement Analysis
SETTLEMENT VALUE FORMULA:
Expected Value = P(win) × Expected Recovery - Legal Costs

CONSIDERATIONS:
- Probability of liability
- Range of potential damages
- Litigation costs (both sides)
- Management distraction
- Reputational impact
- Precedent setting
- Insurance coverage
- Business relationship preservation

Risk Assessment Framework

CategoryExamplesImpact
RegulatoryEnforcement, fines, license revocationHigh
ContractualBreach, termination, damagesMedium-High
LitigationClass actions, IP disputes, employmentHigh
ComplianceSOX, FCPA, data privacyVery High
TransactionalM&A, JV, financingMedium
ReputationalPublic relations, brand damageHigh
Risk Assessment Matrix
PROBABILITY × IMPACT = RISK SCORE

         Impact
         Low   Medium   High
Prob
High     3      6        9
Medium   2      4        6
Low      1      2        3

RISK RESPONSE:
9: Immediate mitigation required
6: Active management plan
3-4: Monitor and review
1-2: Accept risk

Compliance Program Framework

Effective Compliance Program Elements (DOJ)
1. STANDARDS AND PROCEDURES
   - Code of conduct
   - Policies for risk areas
   - Clear and accessible

2. COMPLIANCE LEADERSHIP
   - Board oversight
   - Senior management commitment
   - Adequate resources

3. TRAINING AND COMMUNICATION
   - Risk-based training
   - Regular updates
   - Accessible channels

4. REPORTING MECHANISMS
   - Hotline/helpline
   - Non-retaliation policy
   - Investigation procedures

5. RISK ASSESSMENT
   - Regular assessment
   - Emerging risks
   - Control mapping

6. MONITORING AND AUDITING
   - Testing program
   - Third-party audits
   - Data analytics

7. INCENTIVES AND DISCIPLINE
   - Performance integration
   - Consistent enforcement
   - Root cause analysis

8. THIRD-PARTY MANAGEMENT
   - Due diligence
   - Contractual protections
   - Ongoing monitoring

9. CONTINUOUS IMPROVEMENT
   - Root cause analysis
   - Lessons learned
   - Program updates
Whistleblower Programs
SEC WHISTLEBLOWER PROGRAM:
- 10-30% of sanctions > $1M
- Anti-retaliation protections
- Confidentiality protections

DODD-FRANK PROTECTIONS:
- Broad retaliation prohibition
- Reinstatement, back pay, attorney's fees
- Two-year statute of limitations

INTERNAL REPORTING:
- Anonymous reporting option
- Clear escalation path
- Timely investigation
- Communication of outcomes

Data Privacy Framework

Privacy Program Components
ComponentDescription
GovernancePrivacy officer, steering committee, policies
Data InventoryWhat data, where, purpose, retention
Legal BasisConsent management, legitimate interest
Rights ManagementDSR process, verification, response
Vendor ManagementDPAs, assessments, monitoring
SecurityTechnical measures, breach response
TrainingRole-based, regular updates
AuditingCompliance testing, gap remediation

Consumer web/app exposure checks: self-hosted fonts (no Google Fonts CDN, GDPR); session replay consent-gated with masking (CIPA); CAN-SPAM unsubscribe + postal address on marketing email; auto-renewal terms beside the button and online cancellation (California ARL); COPPA age policy before any under-13 data; DMCA designated agent + takedown process for user uploads.

Data Classification
LevelDefinitionHandling
PublicApproved for public releaseStandard controls
InternalGeneral business informationAccess controls
ConfidentialSensitive business dataEncryption, access limits
RestrictedHighly sensitive (PII, PHI, etc.)Strict controls, audit

See Also

© travisjneuman, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (references) in skills/legal-compliance of travisjneuman/.claude.

  • SKILL.md
  • references/legal-compliance-excellence-skill.md

Open the folder on GitHubat commit 446a461

Compare with similar skills

Legal Compliance next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Legal Compliance compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Legal Compliance this skilltravisjneuman/.claude100—~3.4kAutomated safety check: PassMIT
Find Law Firmjeremylongshore/tons-of-skills-marketplace2.8k—~3.6kAutomated safety check: NotesMIT
Legal CogaAAaqwq/AGI-Super-Team1051 repos~1.9kAutomated safety check: PassMIT
Hipaa ComplianceSushegaad/Claude-Skills-Governance-Risk-and-Compliance9461 repos~2.3kAutomated safety check: PassMIT
Policy OpaAgentSecOps/SecOpsAgentKit2201 repos~3.5kAutomated safety check: PassCustom licence
General Counsel Advisoralirezarezvani/claude-skills28k—~2.3kAutomated safety check: PassMIT

Similar skills

  • Find Law Firm

    jeremylongshore/tons-of-skills-marketplace

    A skill your agent uses whenever the user wants to find, shortlist, vet, or enrich US B2B law firms — corporate, IP/patent, M&A and securities, employment, commercial litigation…

    2.8k GitHub stars~3.6k tokensUpdated yesterday
    Legal & ComplianceAuto-check: notes
  • Legal Cog

    aAAaqwq/AGI-Super-Team

    Legal demands two things: frontier-level reasoning and precision document generation.

    105 GitHub starsUsed in 1 repo~1.9k tokens
    Legal & ComplianceAuto-check passed
  • Hipaa Compliance

    Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

    Expert HIPAA compliance assistant for healthcare and software contexts.

    946 GitHub starsUsed in 1 repo~2.3k tokens
    Legal & ComplianceAuto-check passed
  • Policy Opa

    AgentSecOps/SecOpsAgentKit

    Policy-as-code enforcement and compliance validation using Open Policy Agent (OPA).

    220 GitHub starsUsed in 1 repo~3.5k tokens
    Legal & ComplianceAuto-check passed
  • General Counsel Advisor

    alirezarezvani/claude-skills

    General Counsel advisory for startups: contract review (MSA, SaaS, NDA, DPA, employment), IP strategy, term sheet decoding, and regulatory landscape mapping.

    28k GitHub stars~2.3k tokensUpdated 1 mo ago
    Legal & ComplianceAuto-check passed
  • Implementing Compliance

    ancoleman/ai-design-components

    Implement and maintain compliance with SOC 2, HIPAA, PCI-DSS, and GDPR using unified control mapping, policy-as-code enforcement, and automated evidence collection.

    525 GitHub stars~4k tokensUpdated 10 mo ago
    Legal & ComplianceAuto-check passed

More from travisjneuman/.claude

All 17 skills in this repo
  • Test Specialist

    travisjneuman/.claude

    Test-writing patterns for JS/TS, Python, Go, and Rust (unit, integration, E2E, visual regression).

    100 GitHub stars~3.7k tokensUpdated today
    Auto-check passed
  • Codebase Documenter

    travisjneuman/.claude

    Write codebase documentation: READMEs, architecture docs, getting-started guides, API docs, and code comments.

    100 GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Business Strategy

    travisjneuman/.claude

    Business strategy expertise for strategic planning, competitive analysis, market entry, M&A strategy, portfolio management, and strategic decision-making.

    100 GitHub stars~2.7k tokensUpdated today
    Auto-check passed
  • Data Science

    travisjneuman/.claude

    Data science and analytics expertise for statistical analysis, machine learning pipelines, data governance, business intelligence, predictive modeling, and analytics strategy.

    100 GitHub stars~2.3k tokensUpdated today
    Auto-check passed
  • Finance

    travisjneuman/.claude

    Financial analysis expertise for financial modeling (DCF, LBO, M&A), valuation, financial statement analysis, capital allocation, treasury management, and corporate finance decisions.

    100 GitHub stars~3k tokensUpdated yesterday
    Auto-check passed
  • Health Wellness

    travisjneuman/.claude

    Workplace health and wellness expertise for employee wellness programs, mental health initiatives, ergonomics and safety, healthcare benefits strategy, and health analytics.

    100 GitHub stars~2.4k tokensUpdated yesterday
    Auto-check passed

Questions about Legal Compliance

What does Legal Compliance do?

Legal and compliance expertise for corporate governance, contract analysis, regulatory compliance (SOX, GDPR, HIPAA), risk assessment, intellectual property, and litigation management. claude. Legal and compliance expertise for corporate governance, contract analysis, regulatory compliance (SOX, GDPR, HIPAA), risk assessment, intellectual property, and litigation management.

When should I use Legal Compliance?

Legal Compliance fits situations like: reviewing contracts; ensuring compliance; managing legal risk.

How do I install Legal Compliance in Claude Code?

Run `npx skills add travisjneuman/.claude --skill legal-compliance -a claude-code`. Or copy the skill folder (skills/legal-compliance in travisjneuman/.claude) into .claude/skills/legal-compliance in your project. Claude Code loads it when a task matches its description.

How do I install Legal Compliance in Codex?

Run `npx skills add travisjneuman/.claude --skill legal-compliance -a codex`. Or copy the skill folder (skills/legal-compliance in travisjneuman/.claude) into .agents/skills/legal-compliance in your project. Codex loads it when a task matches its description.

Can I use Legal Compliance in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add travisjneuman/.claude --skill legal-compliance -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/legal-compliance, .gemini/skills/legal-compliance, .github/skills/legal-compliance and .opencode/skills/legal-compliance in your project.

What does Legal Compliance need to run?

SKILL.md names no scripts, command-line tools or credentials: Legal Compliance is instructions for the agent only.

Does Legal Compliance access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Legal Compliance safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Legal Compliance use?

Legal Compliance is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Legal Compliance use?

About 3.4k tokens (SKILL.md is roughly 14k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 27k tokens, read only when the agent opens those files.

What are the alternatives to Legal Compliance?

Skills that share tags, products or a category with Legal Compliance: Find Law Firm (jeremylongshore/tons-of-skills-marketplace, 2.8k stars), Legal Cog (aAAaqwq/AGI-Super-Team, 105 stars), Hipaa Compliance (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 946 stars) and Policy Opa (AgentSecOps/SecOpsAgentKit, 220 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Legal Compliance?

travisjneuman (a GitHub user) maintains it in travisjneuman/.claude, which has 100 GitHub stars. The repository holds 17 skills in this directory. The repository was last updated on October 9, 2026.

Source: travisjneuman/.claude on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.