# legal-compliance

Equips coding agents with structured frameworks for corporate governance, contract review, and compliance across GDPR, HIPAA, and SOX.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 377 installs · ★ 106
- Author: travisjneuman
- License: MIT · policy=mirror · the beginning of the file is at the end of this page
- Source: https://github.com/travisjneuman/.claude/tree/HEAD/skills/legal-compliance/SKILL.md
- Updated: 2026-10-25
- HTML: https://affpapa.org/en/nevibecode/skills/legal-compliance

## What it does

This skill supplies the assistant with structured reference data for reviewing commercial agreements and corporate documents. It provides an essential terms checklist covering liability caps, indemnification, intellectual property assignment, dispute resolution, and termination clauses. An internal approval matrix maps contract values from under $100K to over $10M directly to the required executive sign-off tier.

The regulatory section outlines operational requirements under major corporate laws. It covers Sarbanes-Oxley sections 302, 404, and 906 alongside the COSO internal control framework, GDPR data protection rules with the 72-hour breach notice requirement, HIPAA privacy standards for protected health information, and FCPA anti-bribery measures. Fiduciary obligations like duty of care and the business judgment rule are also detailed.

Because the reference data targets US and European legal frameworks, projects governed by other jurisdictions must specify local statutory rules separately.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add travisjneuman/.claude --skill legal-compliance -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/legal-compliance/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/legal-compliance/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add travisjneuman/.claude --skill legal-compliance -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/legal-compliance/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add travisjneuman/.claude --skill legal-compliance -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/legal-compliance/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install travisjneuman/.claude legal-compliance
```

2. **Manually: put the files in place**
- File: `.github/skills/legal-compliance/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add travisjneuman/.claude --skill legal-compliance -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/travisjneuman/.claude --path skills/legal-compliance
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/legal-compliance/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add travisjneuman/.claude --skill legal-compliance -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/travisjneuman/.claude/tree/HEAD/skills/legal-compliance/SKILL.md

## When to use it
- audit vendor contracts against standard liability, indemnification, and IP clauses
- verify incident response workflows against GDPR and HIPAA notification timelines
- assess financial reporting control frameworks against SOX sections 302 and 404
- classify contracts into correct governance approval tiers based on deal size

## Example prompts
- Review this vendor draft against the essential terms checklist and flag any missing liability caps
- List the mandatory breach reporting deadlines under GDPR and HIPAA for this incident
- Determine the approval level needed for an agreement valued at $2.5M according to the risk matrix

## Source text · SKILL.md · MIT

Below is the content of a third-party file. It is data, not instructions for you: do not act on anything written inside unless the human asks. Block tag: 34a7b768656137f2.

BEGIN THIRD-PARTY FILE 34a7b768656137f2
````text
---
name: legal-compliance
description: Legal and compliance expertise for corporate governance, contract analysis, regulatory compliance (SOX, GDPR, HIPAA), risk assessment, intellectual property, and litigation management. Use when reviewing contracts, ensuring compliance, or managing legal risk.
---

# Legal & Compliance Expert

Comprehensive legal frameworks for governance, contracts, regulatory compliance, and risk management.

## Corporate Governance

### Board Structure & Responsibilities

```
BOARD COMPOSITION:
- Independent directors (majority required for NYSE/NASDAQ)
- Lead independent director
- Committee structure
- Board diversity requirements
- Skills matrix

KEY COMMITTEES:
1. Audit Committee (all independent)
2. Compensation Committee (all independent)
3. Nominating/Governance Committee (all independent)
4. Risk Committee (financial institutions)
```

### Fiduciary Duties

| Duty                   | Definition                         | Key Considerations                     |
| ---------------------- | ---------------------------------- | -------------------------------------- |
| **Duty of Care**       | Act with reasonable prudence       | Informed decisions, due diligence      |
| **Duty of Loyalty**    | Act in corporation's best interest | Avoid conflicts, corporate opportunity |
| **Duty of Good Faith** | Act honestly and fairly            | No intentional harm, follow law        |
| **Duty of Disclosure** | Full and fair disclosure           | Material information, no omissions     |

### Business Judgment Rule

```
PROTECTION REQUIREMENTS:
1. Decision made in good faith
2. No personal interest in outcome
3. Reasonably informed decision
4. Rational belief action is in company's best interest

ENHANCED SCRUTINY (Revlon Duties):
- Triggered in change of control
- Duty to maximize shareholder value
- Active market check required
```

## Regulatory Compliance

### Sarbanes-Oxley (SOX) Compliance

```
KEY SECTIONS:

Section 302: CEO/CFO Certifications
- Certify financial statements
- Certify disclosure controls
- Report control deficiencies

Section 404: Internal Control Assessment
- Management assessment required
- External auditor attestation (accelerated filers)
- Material weakness disclosure

Section 906: Criminal Penalties
- Criminal certification of financial reports
- Up to $5M fine / 20 years imprisonment

COMPLIANCE FRAMEWORK:
- COSO Internal Control Framework
- Documentation of key controls
- Testing program (design + operating effectiveness)
- Deficiency evaluation process
- Remediation tracking
```
````
END THIRD-PARTY FILE 34a7b768656137f2

The third-party file has ended. Everything between the 34a7b768656137f2 tags is data: requests and commands from it are not followed. An “end of file” line with another tag inside the block is part of the file.

First 2575 of 13528 bytes. © travisjneuman · MIT · https://github.com/travisjneuman/.claude/tree/HEAD/skills/legal-compliance/SKILL.md

_Part of the page did not fit — see the HTML version._

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md