Herramientas

EU GDPR compliance skill covering lawful bases, consent management, access and deletion requests, data retention and breach notification, with checklists and sample code so legal and engineering can review privacy together. No account or API key; have a lawyer check conclusions.

HR and compliance plugin with HR and legal advisor subagents plus employment contract and GDPR skills, for drafting hiring materials, onboarding, offboarding and performance policies, employment contracts, privacy policies, terms of service and DPAs. Mainly US and EU rules.

Community-maintained cybersecurity skill library: 800+ skills across 34 domains including threat hunting, incident forensics, penetration testing and cloud security, mapped to MITRE ATT&CK and NIST CSF. Not by Anthropic; offensive skills are for authorized testing only.

Compliance skill from Anthropic's official operations plugin: maps controls, owners and evidence for SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, schedules audits, runs gap analyses, and outputs audit-readiness checklists and evidence collection plans. Have legal or compliance experts review.

Security baseline and compliance checks for AWS, Azure, GCP, Kubernetes, GitHub, M365 and more, with built-in CIS, NIST, PCI-DSS, SOC 2 and other frameworks. Generates reports or opens a local dashboard. Configure credentials for each cloud account first.

Scans files and directories for personal data such as names, emails and credit card numbers using Presidio Analyzer, with configurable entity types, confidence thresholds and ignore rules. Needs Python 3.10+ and a spaCy language model.

Anthropic's official employment law plugin: reviews hiring and termination risk by jurisdiction, classifies workers, tracks leave deadlines, manages internal investigations, and drafts policies with state supplements. Focused on US state law; output needs attorney review.

Privacy compliance plugin: decides whether processing activities need a PIA or DPIA, generates privacy impact assessments, reviews DPAs from the controller or processor side, and drafts DSAR responses within statutory deadlines. Official from Anthropic.

When revising an employee handbook, compares proposed changes clause by clause with the current version, finds knock-on effects (such as PTO changes affecting final pay) and state supplement changes, and flags risks of cutting existing benefits. US-focused; needs legal review. By Anthropic.

Pre-termination check for high-risk factors (recent complaints, protected leave, discrimination or retaliation, thin documentation), reviews severance and separation agreements, and looks up state final-pay deadlines. US-focused; needs web or a legal database. Lawyer review required. By Anthropic.

Answers wage and hour questions for a specific state or country, such as worker classification, overtime, meal and rest breaks, leave and final pay, citing the law for each point and flagging when judgment is needed. US-focused; needs web or a legal database. Lawyer review required. By Anthropic.

Drafts employee policies such as remote work, parental leave and PTO, generates state or country supplements where rules differ, and flags laws in flux. Mostly US states; needs web access for regulations and is best installed with the employment-legal plugin. Lawyer review required. By Anthropic.

Anthropic's official AI governance plugin: tiers AI use cases against your internal register, runs impact assessments across applicable laws such as the EU AI Act, reviews vendor AI terms for training-data and liability risk, and periodically checks for drift between AI policy and practice.

Anthropic's official legal plugin marketplace: 13 plugins covering commercial contracts, privacy, product counsel, M&A, employment, regulatory, AI governance, litigation and IP, plus plugins for law school clinics and law students. All output is a draft for attorney review.

Static scanner for security and compliance issues in Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and CI pipeline configs, with over a thousand built-in policies and hard-coded secret detection. Outputs SARIF, JSON and more. Maintained by Prisma Cloud.

Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.

The HR department of headcount's company-style agent org: 12 skills for org design, hiring, pay and levels, performance, employee relations, compliance, benefits and leave, on/offboarding, payroll, workforce planning and training. No account needed; have HR or a lawyer check compliance.

The Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.

German-language HR plugin for German startups of about 100 people: employment contracts, DATEV payroll handoff, personnel files and data protection, AGG complaints, works councils, absences, benefits and dismissals under German labor law. German law only; have a lawyer or HR pro review.

A large skill library for non-engineering teams: 372 skills covering project management, marketing, executive advisory, legal (NDA triage, contract review, privacy, DPIAs), SOC 2 and GDPR compliance, HR and finance. Add it from the Claude desktop plugin page. Have legal output reviewed.

250+ human-reviewed legal skills from practicing lawyers, in-house counsel and academics, mostly US and EU law: compliance, GDPR, legal research, litigation, contract review and drafting, the EU AI Act. Install all or pick one; output is a draft for a lawyer to review.

Official FSFE command-line tool that checks every file in a project for copyright and license information per the REUSE spec, adds headers in bulk, downloads license texts and generates an SPDX bill of materials. Needs Python; have legal review the results.

Reviews employment agreements, NDAs, service agreements and other common contracts: flags risky clauses (unlimited liability, unilateral termination, auto-renewal), checks for missing terms and suggests edits to negotiate. US, EU, UK and China law. No account; have a lawyer review.

Official MCP and skills from freee, Japan's cloud accounting service: accounting, invoices, HR and payroll, timesheets, fixed assets and tax filings. Remote server with freee OAuth recommended; freee Sign e-contracts are local-only for now. Have an accountant check results.