| name | claude-for-legal |
| description | Full legal plugin suite for commercial contract review, privacy/DPA analysis, and AI governance vendor reviews. Use when the user invokes /commercial-legal:review, /privacy-legal:dpa-review, /ai-governance-legal:vendor-ai-review, renewal tracking, DSAR responses, or EU AI Act triage. |
| metadata | {"source-repo":"https://github.com/anthropics/claude-for-legal"} |
Claude for Legal
100+ skills across 13 practice-area plugins. Each plugin learns your playbook via cold-start interview and writes a practice profile every skill reads from.
Source Repository
- GitHub: anthropics/claude-for-legal
- Install upstream:
/plugin install commercial-legal@claude-for-legal (Claude Code) or npx skills add anthropics/claude-for-legal
Verified citations via CourtListener, Trellis, and Westlaw (via Thomson Reuters CoCounsel plugin).
/commercial-legal:review
Reviews vendor MSAs, NDAs, and SaaS agreements against your negotiation playbook. Tracks amendment history, flags renewal deadlines, routes escalations with draft asks.
Example prompts:
- Review this vendor MSA [paste] — we're the customer. Check liability cap (must be 2x fees), data processing, IP ownership, termination for convenience. Draft redlines for every deviation.
/commercial-legal:renewal-tracker — contracts with cancel-by deadlines in next 90 days. Current terms, last accepted deviations, recommended action: renew/renegotiate/terminate./commercial-legal:amendment-history — renegotiating with [vendor]. Full amendment history [paste base + amendments]: what changed at each step and what we gave up.
/privacy-legal:dpa-review
Reviews Data Processing Agreements as controller or processor. Checks GDPR Article 28 requirements, flags missing mandatory provisions, redlines deviations from standard DPA template.
Companion skills: DPIA generation, DSAR drafting, regulation gap analysis.
Example prompts:
- Review this DPA [paste] — we are the controller. Check Article 28 mandatory clauses, flag missing provisions, redline liability/audit shifts away from us.
/privacy-legal:dsar-response — DSAR from [name] on [date]. Draft acknowledgment letter and fulfillment steps within GDPR 30-day window./privacy-legal:reg-gap-analysis — compare privacy policy [paste] against latest GDPR and CCPA. Gaps prioritised by regulatory risk with redraft recommendations.
/ai-governance-legal:vendor-ai-review
Reviews AI vendor contracts for governance risks — EU AI Act classification, data usage rights, model training opt-outs, liability for AI outputs, audit provisions.
Companion skills: AI Impact Assessments, internal AI usage policy drafts.
Example prompts:
- CRM vendor updated terms with AI features [paste]. New AI provisions? Training on our data? Conflicts with AI governance policy?
/ai-governance-legal:use-case-triage — deploying AI for [use case]. EU AI Act classification: prohibited/high-risk/limited-risk/minimal-risk? Compliance steps before deployment?/ai-governance-legal:policy-starter — draft internal AI usage policy for 200-person B2B SaaS. Cover approved tools, prohibited uses, data handling, employee obligations, review cadence.
Practice Profile Setup
On first use, run cold-start interview for the relevant practice area:
- Organisation type and size
- Standard templates and non-negotiables
- Escalation paths and approvers
- Jurisdiction and regulatory scope
Save the profile for consistent future reviews.
Guardrails
- Decision support only — not legal advice.
- Cite specific contract sections and regulatory articles when flagging issues.
- For renewal tracking, confirm data source (contract management system vs pasted docs).
- AI governance reviews: explicitly check for silent data-training grants in updated ToS.
