Files
lawyer/references/ai-skills.md
2026-08-14 17:34:12 +02:00

37 KiB

External AI agent skills — lawyer

Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.

Tiers: core = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; adjacent = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package.

Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by pipeline/p5_enrich_ai_skills.py on 2026-07-14.

Source: anthropics/skills

  • Repository: https://github.com/anthropics/skills (commit f6656c1, retrieved 2026-07-14)
  • License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
Skill Tier What it adds Upstream
docx adjacent Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … source
pdf adjacent Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … source

Source: wshobson/agents

Skill Tier What it adds Upstream
employment-contract-templates core Create employment contracts, offer letters, and HR policy documents following legal best practices. Use when drafting employment agreements, creating HR policies, or standardizing employment documentation. source
gdpr-data-handling core Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews. source

Source: a5c-ai/babysitter

Skill Tier What it adds Upstream
interview-questions core Generate competency-based and behavioral interview questions with legal compliance validation source
license-compliance-checker core Automated license compliance verification for dependencies to ensure legal compliance during migration source
policy-management core Manage corporate policy lifecycle from drafting through compliance source
gdpr-compliance-automator core GDPR compliance assessment and automation for data mapping, consent management, DSAR handling, and privacy impact assessments source
regulatory-compliance-assessment core Evaluate organizational compliance with healthcare regulations including HIPAA, CMS Conditions of Participation, and accreditation standards through gap analysis and audit procedures source
accreditation-tracer-simulation core Simulate Joint Commission tracer methodology to assess compliance with accreditation standards across patient care processes and support systems source
collection-documentation core Create and maintain comprehensive collection records including cataloging, photography, condition documentation, and database management following AAM/ICOM standards source
translation-management core Integration with translation management systems and i18n workflows. Connect with Crowdin, Transifex, Weblate, manage translation memory, synchronize glossaries, and automate localization pipelines. source
contract-analyzer core Contract analysis and negotiation support skill with clause extraction and risk identification source
grant-proposal-writing core Develop compelling funding proposals for foundations, government agencies, and corporations including narrative development, budget creation, and compliance documentation source
iso-nanotechnology-compliance-checker core Regulatory compliance skill for ISO nanotechnology standards verification and documentation source
accessibility-compliance-auditing core Evaluate learning materials and technology for WCAG, Section 508, and accessibility compliance with remediation recommendations source

Source: affaan-m/everything-claude-code

Skill Tier What it adds Upstream
agentic-os core Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. source

Source: ahacker-1/cre-agent-skills

Skill Tier What it adds Upstream
cre-legal core CRE Legal review suite — 6 specialist skills for PSA review, title & survey analysis, estoppel tracking, loan document review, insurance coordination, and transfer document preparation for multifamily acquisitions. source

Source: alirezarezvani/claude-skills

Skill Tier What it adds Upstream
iso42001-specialist core ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and … source
gc-review core /cs:gc-review — General Counsel interrogation of contracts, IP, regulatory, term sheets, and employment-law surface. Use when reviewing a term sheet before signing, redlining a customer MSA, or checking IP assignment and regulatory … source
ciso-advisor core Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when … source
compliance-readiness core /cs:compliance-readiness — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification … source
patent core Patent prior-art and landscape intelligence skill — not generic patent help. Commits to one of five sub-use-cases via forcing intake (novelty search / freedom-to-operate / competitive landscape / acquisition diligence / litigation … source

Source: bitwize-music-studio/claude-ai-music-skills

Skill Tier What it adds Upstream
researchers-legal core Researches court documents, indictments, plea agreements, and sentencing records. Use when the album subject involves legal proceedings or criminal cases. source

Source: brycewang-stanford/Auto-Empirical-Research-Skills

Skill Tier What it adds Upstream
law-skills core 9 legal research skills. Trigger: legal research, case law analysis, regulatory compliance. Design: legal databases, citation networks, and judicial analytics tools. source
legal-research-guide core Legal research methods, case law analysis, and compliance tools source
courtlistener-api core Legal case law database with PACER data and judge profiles source
legal-nlp-guide core NLP techniques for legal text analysis, case law mining, and contracts source
legal-agent-skills-guide core Agent skills collection for legal research and automation source
opencontracts-guide core Legal document annotation, versioning, and analysis platform source

Source: davila7/claude-code-templates

Skill Tier What it adds Upstream
microservices-patterns core Master microservices architecture patterns including service boundaries, inter-service communication, data management, and resilience patterns for building distributed systems. source
security-compliance core Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security … source
Data Privacy Compliance core Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA, and international data protection laws. Use when implementing privacy controls, conducting data protection impact assessments, ensuring regulatory compliance, or … source
Accessibility Auditor core Web accessibility specialist for WCAG compliance, ARIA implementation, and inclusive design. Use when auditing websites for accessibility issues, implementing WCAG 2.1 AA/AAA standards, testing with screen readers, or ensuring ADA … source
gdpr-dsgvo-expert core Senior GDPR/DSGVO expert and internal/external auditor for data protection compliance. Provides EU GDPR and German DSGVO expertise, privacy impact assessments, data protection auditing, and compliance verification. Use for GDPR compliance … source

Source: foryourhealth111-pixel/Vibe-Skills

Skill Tier What it adds Upstream
peer-review core Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … source

Source: jeremylongshore/claude-code-plugins-plus-skills

Skill Tier What it adds Upstream
find-law-firm core Use whenever the user wants to find, shortlist, vet, or enrich US B2B law firms — corporate, IP/patent, M&A and securities, employment, commercial litigation, regulatory/compliance, data privacy/cyber, real estate, and tax. Triggers on … source
recording-pentest-engagement core Package an engagement's findings, scan outputs, evidence, and signed ROE into a timestamped archive with a SHA-256 manifest covering every file. Establishes chain of custody so legal counsel, internal audit, or an outside SOC can verify … source
apollo-data-handling core Apollo.io data management and compliance. Use when handling contact data, implementing GDPR compliance, or managing data exports and retention. Trigger with phrases like "apollo data", "apollo gdpr", "apollo compliance", "apollo data … source
flexport-data-handling core Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … source
instantly-data-handling core Implement Instantly.ai lead data management, GDPR/CAN-SPAM compliance, and list operations. Use when handling lead imports, managing block lists, implementing unsubscribe flows, or ensuring compliance with email regulations. Trigger with … source
posthog-data-handling core PostHog PII handling, GDPR compliance, consent management, data deletion, property sanitization, and privacy-safe analytics configuration. Trigger: "posthog data", "posthog PII", "posthog GDPR", "posthog data retention", "posthog privacy", … source
supabase-data-handling core Implement GDPR/CCPA compliance with Supabase: RLS for data isolation, user deletion via auth.admin.deleteUser(), data export via SQL, PII column management, backup/restore workflows, and retention policies. Use when handling sensitive … source
twinmind-data-handling core Handle TwinMind meeting data with GDPR compliance: transcript storage, memory vault management, data export, and deletion policies. Use when implementing data handling, or managing TwinMind meeting AI operations. Trigger with phrases like … source
compliance-audit core Performs regulatory gap analysis across 7 compliance frameworks with a scored report card and prioritized remediation roadmap. Use when assessing a website or application for GDPR, CCPA, ADA, PCI-DSS, CAN-SPAM, COPPA, or SOC 2 compliance. … source
contract-review core Orchestrates a comprehensive multi-agent contract review that analyzes risk, plain-English translation, missing protections, and compliance in parallel. Use when a user shares a contract and wants a full review, safety score, or executive … source
notion-load-scale core High-volume Notion operations: parallel requests within 3 req/sec, worker queues, database pagination at scale, incremental sync for large workspaces, and memory management for bulk operations. Trigger with phrases like "notion scale", … source
customerio-security-basics core Apply Customer.io security best practices. Use when implementing secure credential storage, PII handling, webhook signature verification, or GDPR/CCPA compliance. Trigger: "customer.io security", "customer.io pii", "secure customer.io", … source

Source: K-Dense-AI/claude-scientific-skills

Skill Tier What it adds Upstream
peer-review core Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … source

Source: K-Dense-AI/scientific-agent-skills

Skill Tier What it adds Upstream
peer-review core Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … source

Source: kazukinagata/shinkoku

Skill Tier What it adds Upstream
tax-ebookkeeping-context core Background context for the Electronic Bookkeeping Act (電子帳簿保存法) in the shinkoku tax filing plugin. Contains requirements for electronic bookkeeping, scanner storage, mandatory electronic transaction data storage, and shinkoku's compliance … source

Source: mohitagw15856/pm-claude-skills

Skill Tier What it adds Upstream
clause-explainer core Explain a contract clause in plain English — what it means, who it favours, the realistic risk, and what to negotiate. Use when asked what a clause means, to decode legal language, explain a term in a contract, or assess whether a … source
legal-brief core Draft a structured legal brief, case summary, or legal argument outline. Use when asked to write a legal brief, case note, legal memo, argument outline, or position paper. Produces a structured document using IRAC format (Issue, Rule, … source
compliance-checklist core Generate a prioritised compliance checklist for GDPR, SOC 2, ISO 27001, FCA, HIPAA, or other frameworks with a gap analysis. Use when asked for a compliance checklist, gap analysis, readiness assessment, or audit preparation for any … source
redundancy-consultation core Structure a redundancy consultation process and draft key communications (UK employment law focus). Use when asked to plan a redundancy process, write a redundancy letter, structure a consultation, or manage a reduction in force. Produces … source
gdpr-compliance core Assess GDPR compliance and build the core records (ROPA, lawful basis, DSAR, DPIA triggers). Use when asked to get GDPR-compliant, build a Record of Processing Activities, decide a lawful basis, handle data-subject requests, or check … source

Source: mukul975/Anthropic-Cybersecurity-Skills

Skill Tier What it adds Upstream
analyzing-outlook-pst-for-email-forensics core Analyze Microsoft Outlook PST and OST files for email forensic evidence including message content, headers, attachments, deleted items, and metadata using libpff, pst-utils, and forensic email analysis tools for legal investigations and … source
performing-endpoint-forensics-investigation core Performs digital forensics investigation on compromised endpoints including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction. Use when investigating security incidents, collecting evidence for legal … source
analyzing-macro-malware-in-office-documents core Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … source
achieving-cmmc-level-2-compliance core Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, … source
hardening-linux-endpoint-with-cis-benchmark core Hardens Linux endpoints using CIS Benchmark recommendations for Ubuntu, RHEL, and CentOS to reduce attack surface, enforce security baselines, and meet compliance requirements. Use when deploying new Linux servers, remediating audit … source
hardening-windows-endpoint-with-cis-benchmark core Hardens Windows endpoints using CIS (Center for Internet Security) Benchmark recommendations to reduce attack surface, enforce security baselines, and meet compliance requirements. Use when deploying new Windows workstations or servers, … source
implementing-aws-security-hub-compliance core Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security … source

Source: nexu-io/open-design

Skill Tier What it adds Upstream
html-ppt-zhangzara-stencil-tablet core A workplace-safety compliance review for a manufacturing regulator — findings, the evidence chain, and the corrective mandate. Built as a decision-grade policy briefing deck for regulator, plant leadership. source

Source: nWave-ai/nWave

Skill Tier What it adds Upstream
nw-security-and-governance core Database security (encryption, access control, injection prevention), data governance (lineage, quality, MDM), and compliance frameworks (GDPR, CCPA, HIPAA) source

Source: open-gitagent/opengap

Skill Tier What it adds Upstream
document-review core Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … source

Source: Orchestra-Research/AI-research-SKILLs

Skill Tier What it adds Upstream
pinecone core Managed vector database for production AI applications. Fully managed, auto-scaling, with hybrid search (dense + sparse), metadata filtering, and namespaces. Low latency (<100ms p95). Use for production RAG, recommendation systems, or … source

Source: rampstackco/claude-skills

Skill Tier What it adds Upstream
accessibility-audit core Run a comprehensive WCAG accessibility audit covering perceivable, operable, understandable, and robust principles. Use this skill whenever the user wants to audit accessibility, review WCAG compliance, fix accessibility issues, prepare … source

Source: ruvnet/claude-code-flow

Skill Tier What it adds Upstream
AgentDB Memory Patterns core Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. source

Source: ruvnet/ruflo

Skill Tier What it adds Upstream
AgentDB Memory Patterns core Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. source

Source: sgcarstrends/backend

Skill Tier What it adds Upstream
email-best-practices core Use when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capture, ensuring compliance (CAN-SPAM, GDPR, CASL), handling webhooks, retry logic, or deciding … source

Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Tier What it adds Upstream
gdpr-compliance core Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations, (2) drafting GDPR-compliant documents such as privacy policies, Data Processing Agreements (DPAs), and consent notices, … source
itar core Expert ITAR compliance advisor for US defense contractors, exporters, and manufacturers. Use this skill for any question about 22 CFR Parts 120-130, the United States Munitions List (USML), DDTC registration, export license applications … source
csrd core Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality assessment, sustainability … source

Source: vibeeval/vibecosystem

Skill Tier What it adds Upstream
compliance-patterns core GDPR data handling, audit logging, data classification, retention policies, and consent management for regulatory compliance. source
gdpr-compliance core GDPR compliance - data subject rights, lawful basis, DPIA, privacy by design, breach notification, consent management, cross-border transfers, PII masking source
kvkk-compliance core KVKK and GDPR compliance patterns - consent management, right to erasure, breach notification, audit logging, cookie consent, and data classification. source
hipaa-compliance core HIPAA compliance - PHI protection, technical/administrative/physical safeguards, minimum necessary standard, BAA requirements, de-identification, access logging source

Source: wondelai/skills

Skill Tier What it adds Upstream
negotiation core Prepare and execute negotiations using tactical empathy, calibrated questions, and the Ackerman method. Use when the user mentions "salary negotiation", "contract terms", "handling objections", "mirroring and labeling", "difficult … source

Source: zebbern/claude-code-guide

Skill Tier What it adds Upstream
regulatory-audit-generator core Builds compliance checklists for business scenarios involving GDPR, PIPL, or advertising/data laws. Outputs a structured checklist with check items, legal basis, risk levels, and actionable recommendations. Triggered by requests like "run … source