Legal-AI skills in General

1765 skills, across 35 practice areas.

/comments

Apache-2.0GeneralRegulatory

Review open NPRM comment periods, log decisions, track deadlines. Use when an NPRM has a comment window open and you need to surface deadlines, decide whether to file, or record a filing / not-filing / waived decision (--decide CMT-ID).

Comments

MITGeneralRegulatory

Review open NPRM comment periods, log decisions, track deadlines.

Commercial Dispute Resolution

MITGeneralLitigation

Evidence gathering, precedent analysis, and position paper generation for commercial dispute resolution and claims management

Commercial Invoice for Export

Apache-2.0GeneralTrade

Drafts a compliant Commercial Invoice for Export satisfying customs, banking (L/C), logistics, and insurance requirements. Enforces Incoterms 2020, HS tariff classification, country-of-origin determination, export control referencing, and certification language. Use when preparing export invoices for customs authorities, freight forwarders, banks, or insurance underwriters.

Commercial Sublease Agreement

Apache-2.0GeneralReal estate

Drafts commercial sublease agreements subordinate to a master lease, with tripartite protections for sublessor, sublessee, and landlord. Reviews master lease for consent requirements, use restrictions, and subletting conditions before generating. Use when drafting sublease agreements, commercial subleases, subletting contracts, or subtenancy agreements.

Comms Improver

Apache-2.0GeneralGeneral practice

Use when the user has a piece of legal-jargon-heavy text and wants it rewritten in plain language for a specified non-legal audience. Common scenarios — email to a business stakeholder, legal disclaimer for a customer-facing page, memo for a non-legal audience, explanation of a contract clause for a deal team, summary of a regulatory development for an executive briefing. Produces the rewritten text plus a brief explanation of what was changed and why, including any preservation-of-meaning concerns where the rewrite required interpretation. Does not draft from scratch; the input is text that exists.

Comms Improver

Apache-2.0GeneralGeneral practice

Use when the user has a piece of legal-jargon-heavy text and wants it rewritten in plain language for a specified non-legal audience. Common scenarios — email to a business stakeholder, legal disclaimer for a customer-facing page, memo for a non-legal audience, explanation of a contract clause for a deal team, summary of a regulatory development for an executive briefing. Produces the rewritten text plus a brief explanation of what was changed and why, including any preservation-of-meaning concerns where the rewrite required interpretation. Does not draft from scratch; the input is text that exists.

Communication Summarization

Apache-2.0GeneralGeneral practice

Generates structured memorandum-style summaries of legal communications (email threads, meeting notes, correspondence, negotiation records). Captures decisions, commitments, deadlines, party positions, and legally significant language. Triggers when the user asks to summarize communication chains for corporate matters, discovery review, settlement negotiations, or matter file management.

Comparing PIA Methodologies

Apache-2.0GeneralData protection

Compares PIA/DPIA methodologies: CNIL PIA tool, ICO DPIA template, NIST Privacy Framework, and ISO 29134. Provides methodology selection criteria based on regulatory jurisdiction, organisation maturity, processing complexity, and resource availability. Covers regulatory acceptance, tool features, and cross-methodology mapping. Keywords: PIA methodology, CNIL, ICO, NIST Privacy Framework, ISO 29134, DPIA comparison, assessment.

Complaint Letter Writer

MITGeneralConsumer

Rédige une lettre de réclamation formelle pour un litige consommateur, administratif ou professionnel. Se déclenche aussi avec "lettre de réclamation", "plainte", "mise en demeure", "je veux me plaindre", "courrier formel", ou toute rédaction de contestation officielle. Also triggers on "complaint letter", "formal letter of dispute", "write to customer service".

Complex Law → Simple Summary

MITGeneralGeneral practice

Use when a lawyer needs to summarise a complex legal or tax provision in plain language suitable for a non-lawyer client or business team. The output captures key compliance requirements, practical implications, and any action items — stripping technical jargon while preserving all substantive meaning. Applicable to any jurisdiction; MENA-aware for UAE, KSA, LB, EG, and GCC regulatory instruments.

Compliance and Audit

MITGeneralCybersecurity

Use when a project requires a compliance framework mapping, when risks need formal documentation, when audit evidence must be collected, or when producing a compliance attestation before release. Applies to SOC 2, ISO 27001, GDPR, PCI DSS, NIST CSF, and DORA.

compliance-audit-insurance

MITGeneralInsurance

Conduct compliance audits for insurance agencies. TRIGGERS - Use when user needs help with compliance-audit-insurance related tasks.

Compliance auditor

MITGeneralRegulatory

This skill conducts comprehensive compliance audits across 7 regulatory frameworks using a 57-item checklist with quantitative scoring and remediation guidance. Use when preparing for certification audits (SOC 2, ISO 27001) or regulatory reviews. Also consider when onboarding enterprise customers with compliance requirements. Suggest when annual compliance review cycle begins.

/compliance-check -- Compliance Review

Apache-2.0GeneralRegulatory

Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas. Use when launching a feature that touches personal data, when marketing or product proposes something with regulatory implications, or when you need to know which approvals and jurisdictional requirements apply before proceeding.

Compliance Checklist Generation

MITGeneralData protection

Build evidence-oriented readiness checklists for frameworks such as SOC 2, HIPAA, PCI DSS, and GDPR, with gaps and remediation priorities. Use when the user needs an internal readiness assessment or control-mapping plan; do not use it to certify compliance or replace an auditor or counsel.

Compliance Checklists

MITGeneralRegulatory

Create operational checklists for legal, accessibility, privacy, platform, and product compliance obligations.

Compliance Checklist Skill

MITGeneralData protection

Generate a prioritised compliance checklist for GDPR, SOC 2, ISO 27001, FCA, HIPAA, or other frameworks with a gap analysis. Use when asked for a compliance checklist, gap analysis, readiness assessment, or audit preparation for any regulatory framework. Produces a structured checklist with prioritised gaps, quick wins, and evidence requirements. Optimised for Opus 4.7 and newer models. Not a substitute for legal or compliance professional advice.

Compliance Check (Pre-Launch)

MITGeneralContracts

Pre-launch regulatory go/no-go on a PROPOSED action, product feature, marketing campaign, partnership, sub-processor addition, AI capability, geographic expansion, or pricing/auto-renewal change — BEFORE it ships. Surfaces applicable regulations across jurisdictions (GDPR, CCPA/CPRA, state privacy laws, HIPAA, COPPA, PCI-DSS, CAN-SPAM, TCPA, FTC, EU AI Act, Puerto Rico Ley Núm. 111-2005 / DACO consumer rules, sector laws), required internal approvals (legal, DPO, security, exec), required external notifications (customer DPA notice, 30-day sub-processor notice, regulator filings, insurance), required pre-launch artifacts (DPIA, updated privacy policy, consent flow, SCCs), and risk areas. Outputs a clear GO / NO-GO / GO-WITH-CONDITIONS decision with specific verifiable conditions and a re-check trigger. Use whenever the user says "is this compliant", "can we launch X", "what regulations apply to [feature/campaign/partnership/sub-processor/AI capability]", "do we need approval before [action]", "pre-launch legal/regulatory check", "go/no-go on [proposed initiative]", "are we OK to ship [thing] in [jurisdiction]", or describes wanting a forward-looking compliance view on a not-yet-shipped initiative. Do NOT use for: auditing already-published customer-facing legal pages on a live site (use legal:legal-audit), reviewing a contract document like MSA/NDA/DPA (use legal:review-contract), tracking ongoing compliance program operations like SOC 2 evidence collection or audit calendar (use operations:compliance-tracking), SOX 404 internal financial-control testing (use finance:sox-testing or finance:audit-support), responding to an inbound legal inquiry like a DSAR or subpoena (use legal:legal-response), drafting an actual outbound breach notification AFTER an incident (escalate to counsel + use legal:legal-response template path; this skill is PRE-LAUNCH design check, not post-incident response). Defining characteristic: PRE-launch + proposed thing + forward-looking go/no-go

compliance-evidence

MITGeneralData protection

Use when the user needs compliance and privacy evidence.

Compliance Gap Analysis

MITGeneralRegulatory

Use when a compliance officer, legal team, or external adviser needs to map an organization's current compliance posture against applicable regulatory frameworks — identifying gaps, quantifying severity, and recommending remediation. Covers AML/KYC (FATF 40 Recommendations + Travel Rule), sanctions (OFAC, UN, EU, MENA national lists), data protection (GDPR, KSA PDPL, UAE PDPL, Bahrain, Egypt), anti-bribery (FCPA, UK Bribery Act, MENA laws), ESG/disclosure, and sector-specific frameworks (banking, fintech, insurance, healthcare). Outputs a structured gap register with severity tiers.

Compliance Obligations Mapper

MITGeneralRegulatory

Converts a specific law or regulation's text into an operational obligations register — each obligation, the owner responsible, the trigger that activates it, the evidence needed to demonstrate compliance, the deadline or frequency, and the control that should exist — flagging, where current practice is described, which obligations are and are not yet met. Use for "turn this regulation into an obligations register", "what controls do we need for this new rule", "build an implementation plan for this statute", or "map this regulation to owners and deadlines". Distinct from regulatory-applicability-analyst (determines whether/which rules apply, not how to implement one). Where a dedicated domain skill exists (DPDP, POSH, labour, securities), prefer it; use this one for a regulation with no existing dedicated skill, or a newly enacted one.

Compliance Policy Auditor

MITGeneralData protection

Audit corporate policies or data-handling descriptions against regulatory frameworks (GDPR, SOC2, HIPAA). Use when users need to identify compliance gaps or risk levels in technical procedures.

Compliance Report Generator — Auditor-Ready Evidence in Minutes

MITGeneralRegulatory

Generate auditor-ready compliance reports with multi-framework control mapping, automated evidence collection strategies, gap analysis, and structured report packages for SOC 2, HIPAA, GDPR, PCI-DSS, and ISO 27001. Reduces audit prep from weeks to days.