Contract Analyzer
Review contracts for concerning clauses, extract key terms, compare to standard terms, and flag unusual provisions. Use when user needs contract review, legal document analysis, or agreement evaluation.
What it does
# Contract Analyzer Review contracts to surface risks, key terms, and unusual provisions, then recommend negotiation actions. ## Contents - `references/key-terms.md` -- full checklist of terms to extract by category - `references/risk-flags.md` -- red/yellow flags, standards comparison, commonly missing clauses - `references/output-template.md` -- the full analysis report format - `references/examples.md` -- worked examples and best practices ## Workflow 1. Include this disclaimer in every output: "Legal Disclaimer: This is informational analysis only, not legal advice. Always consult with a qualified attorney for legal matters. Contract interpretation can be complex and jurisdiction-specific." 2. Identify the contract type (employment, independent contractor/freelance, NDA, service, partnership, software license, real estate, purchase). 3. Extract key terms across financial, duration/termination, intellectual property, liability/indemnification, and other critical categories. See `references/key-terms.md`. 4. Flag concerning clauses as red flags (high risk) or yellow flags (review carefully). See `references/risk-flags.md`. 5. Compare terms to industry standards: note deviations, one-sided provisions, and missing standard protections. See `references/risk-flags.md`. 6. Assess balance: determine whether obligations, penalties, and protections are reciprocal or favor one party. 7. Provide actionable recommendations: specific clauses to negotiate, alternative language, questions to ask, terms to add, and deal-breakers. 8. Format the report per `references/output-template.md`. For worked examples and best practices, see `references/examples.md`.
More security skills
Compliance Checker
Audits a codebase or business process for regulatory compliance across GDPR, HIPAA, SOC2, CCPA, and PCI-DSS. Scans for PII handling, data retention, encryption, access controls, audit logging, consent management, and data transfer issues. Generates a structured compliance report with findings, gap analysis, remediation steps, and evidence requirements.
Contract Redliner
Reads a contract and generates redline suggestions with replacement language. Identifies unfavorable terms, missing protections, ambiguous language, liability exposure, IP risks, termination traps, and auto-renewal gotchas. Produces a contract-review.md with clause-by-clause analysis, risk ratings, tracked changes format, and negotiation talking points. Use when the user wants redline markup, contract markup, or suggested contract edits.
Security Pentest Planner
Plans security penetration tests for web applications. Analyzes codebase, API routes, auth implementation, and infrastructure config to generate comprehensive pentest plans. For authorized testing only.
Tech Due Diligence
Technical due diligence for M&A, investment, or acquisition. Reads a target company's codebase and generates a comprehensive tech DD report with architecture assessment, tech debt quantification, scalability analysis, security posture, team capability inference, build system quality, test coverage, deployment maturity, and open source license risks. Outputs tech-dd-report.md formatted like a real investment memo with risk ratings, remediation costs, and go/no-go recommendation.