Tools

HR and compliance plugin with HR and legal advisor subagents plus employment contract and GDPR skills, for drafting hiring materials, onboarding, offboarding and performance policies, employment contracts, privacy policies, terms of service and DPAs. Mainly US and EU rules.

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

Helps in-house legal score and rank risks in contracts, deals and disputes on a severity-by-likelihood matrix, write risk memos, and know when to escalate to senior or outside counsel. No other tools needed. From Anthropic's legal plugin; not legal advice, have a lawyer review.

Reviews contracts clause by clause against your organization's negotiation playbook, flags deviations, proposes redlines and analyzes business impact. A skill from Anthropic's official legal plugin; conclusions need review by a legal professional.

Anthropic's official business operations plugin: vendor evaluations, process docs (flowcharts, RACI, SOPs), change requests, capacity planning, status reports and runbooks. Works without external tools and does more with ITSM and project management tools connected.

Quickly pre-screens incoming NDAs and sorts them green, yellow or red into standard approval, legal review or full review, focusing on non-competes, non-solicitation and missing carve-outs. Part of Anthropic's official legal plugin.

Runs compliance checks on planned features, marketing campaigns or business initiatives: identifies applicable regulations such as GDPR and CCPA, required approvals and risks, and concludes go, go with conditions, or needs further review. From Anthropic's legal plugin; not legal advice.

Large multi-domain plugin marketplace: 99 plugins bundle hundreds of skills, agents and slash commands covering engineering, marketing, product, project management, regulatory and quality, finance and C-level advisory. Also offers install options for Codex, Gemini CLI and others.

A collection of 380+ skills across engineering, product, marketing, compliance, finance and executive advisory roles, with many standard-library Python scripts. Claude Code can install them by domain as plugins; works with Codex, Gemini CLI and a dozen other agents.

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Official AWS MCP that validates CloudFormation templates for syntax and security compliance, diagnoses deployment failures, and searches CloudFormation and CDK docs, code samples and best practices. Replaces the deprecated Cloud Control API server; needs AWS credentials.

Anthropic's official legal plugin marketplace: 13 plugins covering commercial contracts, privacy, product counsel, M&A, employment, regulatory, AI governance, litigation and IP, plus plugins for law school clinics and law students. All output is a draft for attorney review.

Anthropic's official employment law plugin: reviews hiring and termination risk by jurisdiction, classifies workers, tracks leave deadlines, manages internal investigations, and drafts policies with state supplements. Focused on US state law; output needs attorney review.

Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud.

Contract review plugin: five parallel subagents score contracts and flag risky clauses, compare versions, spot missing terms, explain legalese and draft counterproposals, NDAs, terms of service and privacy policies with GDPR/CCPA gap checks. No account needed; US-law focused; needs lawyer review.

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.

The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.

The HR department of headcount's company-style agent org: 12 skills for org design, hiring, pay and levels, performance, employee relations, compliance, benefits and leave, on/offboarding, payroll, workforce planning and training. No account needed; have HR or a lawyer check compliance.

The legal and risk department of headcount's company-style agent org: 8 skills for contracts and negotiation, governance, disputes and evidence, IP, privacy, compliance and a risk register; can vet other departments' work. Skills only, no account; laws vary by region, so have a lawyer review.

Contract assistant for freelancers and small businesses: scores contracts and flags risks per clause, explains terms plainly, compares versions, and drafts NDAs, privacy policies and counterproposals. Installs via the repo script; US-law oriented; PDF export needs Python; have a lawyer review.

German-language HR plugin for German startups of about 100 people: employment contracts, DATEV payroll handoff, personnel files and data protection, AGG complaints, works councils, absences, benefits and dismissals under German labor law. German law only; have a lawyer or HR pro review.

A large skill library for non-engineering teams: 372 skills covering project management, marketing, executive advisory, legal (NDA triage, contract review, privacy, DPIAs), SOC 2 and GDPR compliance, HR and finance. Add it from the Claude desktop plugin page. Have legal output reviewed.

250+ human-reviewed legal skills from practicing lawyers, in-house counsel and academics, mostly US and EU law: compliance, GDPR, legal research, litigation, contract review and drafting, the EU AI Act. Install all or pick one; output is a draft for a lawyer to review.

Official FSFE command-line tool that checks every file in a project for copyright and license information per the REUSE spec, adds headers in bulk, downloads license texts and generates an SPDX bill of materials. Needs Python; have legal review the results.