compliance
claudeGRC Compliance Lifecycle — scope, assess, remediate, certify, monitor with 51 skills across 30+ regulations
51 skills · hooks
Legal Lifecycle Framework — assess, draft, review, comply, govern with 35 skills
Plugin legal from marketplace metapowers in bromso/metapowers. Commands read from the repo's manifest — 18 days ago.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
accessibility-complianceMap legal accessibility obligations across markets — ADA, Section 508, EAA, UK and Canadian law — with WCAG level, exposure, remediation and a draft accessibility statement. Use when the user sells in several countries and asks which accessibility laws apply in each. Not for one law or the audit; se
ccpa-complianceAnalyze CCPA/CPRA obligations legally — applicability thresholds, consumer-rights procedures, notice at collection, the Do Not Sell or Share link, and service-provider contract terms. Use when the user needs to know whether CCPA applies and what their notices, request procedures and vendor contracts
clause-analysisAnalyze one or a few contract clauses in depth — legal effect, market comparison, hidden triggers and carve-outs, a 1-5 risk score, alternative wording and enforceability by jurisdiction. Use when the user quotes a specific clause and asks what it really means, whether it is standard, or how to rewo
clause-libraryBuild or extend a library of approved contract clauses, each in standard, protective and minimum-acceptable versions with jurisdiction notes and usage guidance. Use when the user wants reusable fallback language their team can pull into any contract. Not for positions on one specific deal; see /lega
compliance-monitorDesign a legal team's ongoing compliance oversight — monitoring scope per regulation, owners, escalation levels, board reporting and a compliance calendar. Use when the user needs to decide who owns each regulation, how non-compliance escalates and which legal deadlines to calendar. Not for automate
compliance-reviewReview one document — a contract, policy or terms — against GDPR, CCPA, SOC 2 and accessibility requirements, rating each Compliant, Partially or Non-Compliant with language to close each gap. Use when the user has a draft document and asks whether it is compliant or what it is missing for a regulat
contract-reviewReview a whole contract section by section — missing standard clauses, unfavorable terms, unclear language and cross-references — with a Low/Medium/High risk rating and prioritized revisions. Use when the user shares a contract and wants a thorough review of everything in it, including what is missi
contract-trackerSet up contract management — a contract register, 90/60/30-day renewal and expiration alerts, renegotiation candidates, obligation tracking and a recommended tool or process. Use when the user keeps missing renewal or notice deadlines, or needs a handle on all their contracts and what each one commi
cookie-consentDesign a cookie consent implementation — cookie audit and categories, opt-in or opt-out rules per jurisdiction, banner and preference-center spec, consent records, re-consent triggers and CMP setup. Use when the user is building or fixing a cookie banner or consent manager and needs to know how it m
cookie-policyDraft a public cookie policy — what cookies are, categories, an inventory table, browser opt-out instructions, third-party disclosures and how consent is given and withdrawn. Use when the user needs the cookie policy page for their website or app written or updated. Not for building the consent bann
data-processing-agreementDraft a GDPR Article 28 Data Processing Agreement — controller and processor roles, processing details, processor obligations, sub-processors, breach notice, audit rights, deletion and international transfers. Use when a customer asks the user to sign a DPA, or the user needs one for a vendor that h
decision-memoDocument a legal decision in the project's decision log — the question, alternatives with pros, cons and legal risk, the chosen option and rationale, accepted risk, approvers and revisit triggers. Use when the user has made a legal call and wants a record of why and what risk they accepted. Not for
employment-agreementDraft an employment contract or independent contractor agreement — duties, pay, IP assignment, restrictive covenants, confidentiality and termination, flagging misclassification risk and state or country rules. Use when the user is hiring an employee or engaging a contractor and needs the agreement
gdpr-complianceAnalyze GDPR obligations legally — data mapping, lawful basis, DPIA and DPO needs, data subject rights procedures, breach notification, transfer mechanisms and Article 30 records. Use when the user asks how to legitimize EU data transfers, whether they need a DPIA or DPO, or what GDPR legally requir
incident-response-planCreate a legal data breach response plan — severity levels, response team, containment, investigation, notification deadlines by jurisdiction, communication templates and tabletop exercises. Use when the user has no written plan for a data breach and needs one drafted, through regulator and customer
ip-reviewReview the intellectual property terms in an agreement — background and foreground IP, assignment and work-for-hire, license grants, open-source conflicts, freedom to operate and common IP traps. Use when the user asks who will own the work, code or inventions under a contract, or whether a license
jurisdiction-analysisAnalyze legal requirements across every country or state a business touches — registration, data protection, employment and consumer law — with a comparison matrix, conflicts and a recommended baseline. Use when the user operates, hires or stores data in several countries or states and asks how thei
legal-auditAudit a business's existing legal documents — contracts, policies, terms and governance records — against standards, finding missing, expired and non-compliant items ranked by severity with a remediation order. Use when the user wants to know what legal paperwork they are missing or which documents
legal-glossaryGenerate a plain-language glossary of legal terms by area — contracts, privacy, IP, employment, compliance and corporate — with an example and why each term matters to non-lawyers. Use when the user or their team keeps hitting legal jargon and wants the terms explained in everyday words.
legal-playbookCreate a legal playbook for recurring scenarios — contract negotiation, breach response, terminations, IP disputes, vendor onboarding — with decision trees, approval thresholds, escalation rules and turnaround times per team. Use when the user wants sales, HR, engineering or procurement to handle ro
legal-researchResearch one legal question in statutes, regulations, case law and commentary, with a confidence level, open ambiguities and whether to see an attorney. Use when the user asks what the law says on a concrete point, like whether they need a state license to operate. Not for a quoted clause or a whole
ndaGenerate a mutual or one-way Non-Disclosure Agreement — definition of confidential information, standard exclusions, permitted use, term and survival, return of materials, remedies and governing law. Use when the user is about to share confidential information with another party and needs an NDA dra
negotiation-prepPrepare a negotiation strategy for a contract — ideal, compromise and walk-away positions per contentious clause, counter-arguments, redlines, trade-offs and BATNA. Use when the user is about to negotiate a specific contract with a counterparty and wants to know what to push for and what to concede.
open-source-policyCreate an open-source usage and contribution policy — approved, restricted and prohibited licenses, dependency approval, license scanning in CI, contribution and CLA rules, a compatibility matrix and SBOM requirements. Use when the user's engineers need rules on which open-source licenses they may u
privacy-policyDraft a GDPR- and CCPA-compliant privacy policy — data collected, purposes and lawful basis, sharing, retention, user rights, transfers, children's privacy and Do Not Sell provisions. Use when the user needs a privacy policy written or updated for their website, app or product. Not for cookie-specif
red-flag-detectionScan an agreement for high-risk and non-standard terms — liability, auto-renewal, restrictive covenants, IP grabs, one-sided termination, data and dispute clauses — rated Red, Amber or Green. Use when the user wants a quick verdict on whether to sign, negotiate or walk away from an agreement they re
regulatory-mapMap the regulations governing a product by jurisdiction, industry and data type into a law-by-law matrix showing current compliance status and priority gaps. Use when the user wants to see, law by law, how compliant their product is today and which gaps matter most. Not for listing every regulation
regulatory-updatesPlan implementation of a specific new or amended law — impact rating, dated timeline, owners, resources and items for counsel to review. Use when a new or amended law takes effect soon and the user needs a dated plan with owners to be ready for it. Not for ongoing monitoring of regulatory change; se
risk-assessmentScore legal risks — regulatory, contractual, IP, employment, privacy and litigation — on a likelihood-impact matrix weighted by jurisdiction, with mitigations. Use when the user asks where their biggest legal or regulatory exposure lies and what to tackle first. Not for security threats or delivery
saas-agreementDraft a SaaS subscription or licensing agreement for a software provider — license grant, subscription and billing, SLA and service credits, data ownership, security, suspension, data export and liability cap. Use when the user sells software as a service and needs the customer contract their busine
soc2-prepPrepare for a SOC 2 audit — trust services criteria selection, required policies, a control matrix with owners, an evidence collection plan, a readiness timeline and auditor selection criteria. Use when the user has decided to pursue SOC 2 and needs the policy set, control matrix and timeline to get
stakeholder-needsIdentify the legal needs of each business unit, product and stakeholder group, build a legal service catalog, find underserved areas, and recommend in-house, outside counsel or tooling to cover them. Use when the user is setting up or scaling a legal function and asks which teams need what kind of l
terms-of-serviceDraft or update Terms of Service for a website, app, marketplace or API — acceptance, eligibility, accounts, prohibited uses, user content, disclaimers, liability, termination and dispute resolution. Use when the user is launching a digital product and needs the public terms users accept at sign-up.
training-planDesign a legal compliance training program — role-based needs, modules with objectives, cadence, assessments, completion tracking and regulation-specific courses. Use when the user needs to train employees on privacy, contracts, anti-bribery or other legal duties and track completion. Not for securi
vendor-agreementDraft a vendor or supplier services agreement from the buyer's side — scope and SOW, SLAs, key personnel, pricing, change orders, data protection, indemnities, insurance, termination and transition. Use when the user is hiring an outside vendor, agency or supplier and needs a services contract that
"${CLAUDE_PLUGIN_ROOT}"/hooks/phase-gate.sh
GRC Compliance Lifecycle — scope, assess, remediate, certify, monitor with 51 skills across 30+ regulations
51 skills · hooks
NIST CSF 2.0 cybersecurity framework — govern, identify, protect, detect, respond, recover with 39 skills
39 skills · hooks
RACE Framework marketing process — strategy, reach, act, convert, engage with 37 skills
37 skills · hooks
Scrum-based project management — initiate, plan, sprint, review, improve with 32 skills
32 skills · hooks
Eight-phase accounting cycle — analyze, journal, ledger, trial balance, adjust, statements, close with 5 utility skills
13 skills · hooks
Six-phase FP&A process — assess, plan, forecast, budget, model, review with 5 utility skills
11 skills · hooks
Recommended: all published HyperFrames skills in one versioned bundle. Create and render videos from HTML: the contract, film, captions, overlays, motion and look references, the CLI, the registry, media, Figma, slideshows and Remotion ports.
22 skills
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.
5 skills · 16 commands · 4 agents · hooks
Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.
6 skills
Ship stablecoin apps faster. Best-practice skills for USDC payments, cross-chain transfers, wallets, and smart contracts — plus Circle's MCP server for real-time SDK and documentation guidance.
20 skills · 1 MCP server
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.