Automate contract review and monitoring with Box MCP — identify new contracts added since last review period using metadata or keyword search, compare contracts against standard firm templates to flag material variances (indemnification, liability caps, termination rights, governing law, IP ownership), extract and write structured metadata (parties, dates, contract value, key clauses, risk ratings, expiration dates) to Box for searchability, create variance analysis reports with citations, proactively monitor for expiring contracts to trigger renegotiation reminders with calculated notice deadlines, and batch process multiple contracts with rate-limit-aware pacing. Use this skill when the user mentions contract review, contract monitoring, NDA review, MSA comparison, contract expiration, contract metadata, variance analysis, or needs recurring contract analysis workflows.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
Automate contract review and monitoring with Box MCP — identify new contracts added since last review period using metadata or keyword search, compare contracts against standard firm templates to flag material variances (indemnification, liability caps, termination rights, governing law, IP ownership), extract and write structured metadata (parties, dates, contract value, key clauses, risk ratings, expiration dates) to Box for searchability, create variance analysis reports with citations, proactively monitor for expiring contracts to trigger renegotiation reminders with calculated notice deadlines, and batch process multiple contracts with rate-limit-aware pacing. Use this skill when the user mentions contract review, contract monitoring, NDA review, MSA comparison, contract expiration, contract metadata, variance analysis, or needs recurring contract analysis workflows.
Read box:box for Box MCP auth, tool selection, base workflows. If missing, run: npx skills add https://github.com/box/box-for-ai --skill box
Read box-legal-workflows for risk frameworks, confidentiality, human-in-the-loop requirements, Box AI governance, metadata strategy. If missing, ensure it's installed from the same skill package.
Legal contract management involves regular review of executed agreements to ensure compliance, track dates (renewals, expirations), identify risks, and maintain structured metadata. This skill automates recurring reviews, variance analysis, metadata extraction, and proactive expiration monitoring.
Core principles: Recurring cadence, template-based comparison, structured metadata, proactive monitoring, human oversight for risk.
Risk Assessment Framework
Variance Analysis
[CONFIRM: Material clauses for your firm/practice area?]
Material variances (High Risk):
Liability caps or limitations changes
Indemnification modifications
Termination rights or notice period alterations
Governing law or dispute resolution changes
Confidentiality obligation modifications
IP ownership changes
Non-standard payment terms or penalties
Minor variances (Low Risk):
Address or entity name updates
Minor formatting differences
Clarifying language (no substance change)
Standard exhibits or schedules
Practice-specific material:
Employment: Non-compete, termination, benefits
Commercial: Payment, warranties, liability
IP Licensing: Usage rights, royalties, ownership
Real Estate: Title, zoning, environmental
NDAs: Confidential info definition, term, exceptions
Risk Rating
See box-legal-workflows for: General risk framework.
Contract-specific:
High Risk:
3+ material variances from template
Changes to indemnification, liability caps, termination, governing law
Missing key protections from standard
Unfavorable terms (unlimited liability, one-sided, auto-renewal without notice)
Minor unfavorable terms (longer notice, restricted termination)
Unclear/ambiguous clauses
Missing exhibits (referenced but not attached)
Low Risk:
No material variances OR minor clarifying changes only
Favorable terms (stronger protections than standard)
All key protections present
[CONFIRM: Contract types ALWAYS flagged regardless of variance?]
Examples: High-value (> $[threshold]), specific counterparties, certain jurisdictions, contracts > [X] years.
Metadata Extraction Strategy
[CONFIRM: Fields to extract?]
Core metadata:
Contract title/description
Contracting parties (your entity + counterparty)
Counterparty name (normalized)
Contract type (NDA, MSA, SOW, License)
Execution, effective, expiration dates
Term length (months/years)
Auto-renewal (yes/no, renewal term)
Notice period for termination (days)
Contract value, payment terms
Governing law / jurisdiction
Risk & review:
Risk rating (High/Medium/Low)
Material variances (list)
Review date, reviewed by
Next review date
Expiration alert date (e.g., 60 days before)
Status (active/expired/terminated/under negotiation)
Copying files to externally-accessible folders (if file was NOT already externally accessible)
CONFIRM if uncertain:
5. Identifying material variances (if ambiguous or edge case)
6. Writing metadata (if extracted values are unclear or contradictory)
Proceed autonomously when confident:
Writing metadata when extraction is clear and unambiguous
Copying/organizing files between folders (internal-only to internal-only, or external to external)
Creating variance reports
Extracting dates, parties, and standard terms with high confidence
Batch processing any size (pace appropriately)
NEVER auto-approve without authorization:
High-risk contracts (3+ variances)
Unfavorable indemnification or liability
Contracts missing key protections
Above value threshold
High-stakes practice areas (litigation, IP)
Batch processing:
Process one at a time (rate limits)
Pace 1-2 seconds apart
Report progress: "Processed 10/50..."
Decision transparency:
Document WHAT compared (contract vs. template)
Document WHICH variances (specific clauses)
Document WHY rating assigned (link to report)
Cite sections (page numbers, clauses)
Timestamp review
Box AI usage:
Context: "Reviewing contracts for law firm. Identify material variances creating legal risk..."
Request citations: "For each variance, cite section and page"
Pace appropriately (1-2 secs)
Limit 2-3 files at a time (contract + template + max 1 prior version)
Example Workflows
Example 1: Monthly NDA Review
Request: "Review NDAs from last 30 days, compare to standard."
Flow:
[CONFIRM]: "NDAs folder ID? Metadata 'execution_date' or upload date?"
search_files_metadata (date range)
[CONFIRM]: "Found 5 NDAs. Standard template ID?"
For each (1-2 sec pauses):
a. ai_qa_multi_file (compare, focus material clauses)
b. [CONFIRM]: "Company X: 2 variances (broader definition, 5yr vs. 3yr). Medium risk?"
c. ai_extract_structured_from_metadata_template
d. set_file_metadata
e. Create report, upload
Report: "Reviewed 5. Risk: 1 High, 2 Medium, 2 Low. High (Company Y): unlimited liability, no mutual."
[CONFIRM]: "Who reviews high-risk?"
create_file_comment, create_collaboration
Report: "Review complete. High routed to David."
Example 2: Expiring Contracts
Request: "Find contracts expiring in next 60 days, alert owners."
Flow:
[CONFIRM]: "Folder ID? Metadata 'expiration_date' and 'status'?"
search_files_metadata (60 days, status=active)
[CONFIRM]: "Found 8. Owner from metadata 'contract_owner' or collaborations?"
For each:
a. get_file_details (owner, dates, risk, notice period)
b. Calculate days to expiration and notice deadline
c. [CONFIRM]: "[Counterparty] expires [date] in [X] days. Notice [Y] days, act by [deadline]. Tag [attorney]?"
d. create_file_comment
e. set_file_metadata (alert_sent: yes)
Report: "Alerts sent for 8. 3 high (renegotiate), 4 medium (review), 1 low (consider expire)."
Example 3: Extract Metadata (Unstructured)
Request: "20 vendor contracts, no metadata. Extract key terms."
Flow:
[CONFIRM]: "Folder ID?"
list_folder_content_by_folder_id (20)
[CONFIRM]: "Template exists? If no, extract: vendor, type, dates, value, payment, SLA, notice, renewal, law. Add/remove?"
[CONFIRM]: "Process 20 with 1-2 sec delays (~30-40 sec)?"
For each:
a. ai_extract_structured_from_fields_enhanced
b. [IF UNCLEAR]: [CONFIRM]: "Expiration '[date]'. Contract says '[text]'. Correct?"
c. set_file_metadata
d. Progress: "Processed 10/20..."
Report: "Extraction complete. 20 now searchable."
[CONFIRM]: "Create template for future?"
Example 4: Compare Versions
Request: "Compare initial and final MSA with Acme, what changed?"
