Claude Tools / Plugins / commercial-legal (claude-for-legal)
Audited plugin listing
commercial-legal (claude-for-legal)
Ten skills for in-house commercial legal work: NDA review, vendor agreement playbooks, renewal tracking, escalation routing, and SaaS MSA review.
Listing signals
Install check
✓ Pass
Risk scan
✓ Clean
Implementation
Prompt-only
Assessment
Verdict
Commercial-legal is the most thoughtfully designed first-party plugin in this wave. Ten skills coordinate a full contract workflow — intake interview, NDA review, playbook-based agreement review, escalation routing, amendment history, stakeholder summaries, and renewal tracking — all wired together via cross-skill handoffs. The security thinking is exceptional for a prompt-only plugin: an explicit prompt-injection defense in the intake interview, jurisdiction-aware attorney-privilege warnings, and HTML-escaping instructions for counterparty-supplied strings. The practice profile writes to a scoped ~/.claude path with full disclosure. Install it if you're in-house commercial and tired of explaining your playbook from scratch every session.
Installation
Add to Claude Code
Evidence
Audit receipts
This listing is tied to a specific source commit and records both installation and risk checks.
Install check
✓ Pass
Ten skills plus three agent files. Writes practice profile config to ~/.claude/plugins/config/claude-for-legal/commercial-legal/ — scoped and documented. hooks.json is present but empty.
Risk scan
✓ Clean
All file operations are local reads/writes on the user's machine at the disclosed config path. The CLAUDE.md template explicitly warns that "PRIVILEGED & CONFIDENTIAL" is a US-only doctrine, and instructs Claude not to assert it in non-US contexts. The plugin includes an explicit prompt-injection defense in cold-start-interview: "Setup does not read your personal Claude history, unrelated conversations, or your home-directory CLAUDE.md."
Composition
What was measured
Prose lines
3,899
Code lines
0
Prose / code
99.00
Related