casemark/gsa-schedule-contract
skills/legal/gsa-schedule-contract/SKILL.md
Drafts FAR/GSAR-compliant GSA Schedule (MAS/FSS) contracts with clause matrices, SIN scope, pricing/PRC/EPA mechanics, IFF reporting, TAA, Section 508, cybersecurity, and subcontractor flow-downs. Use when drafting or reviewing GSA Schedule contracts, MAS solicitations, SIN crosswalks, price lists, or FAR/GSAR clause sets. Triggers: GSA Schedule, MAS, SIN, FAR 52.212, GSAR 552.238, IFF, PRC, EPA, TAA, Section 508, FedRAMP.
$ install --global
skillsauthnpx skillsauth add casemark/skills gsa-schedule-contractInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 3:36 AM180.5s1 file scanned
SKILL.md
- name:
- gsa-schedule-contract
- description:
- >-
- price lists, or FAR/GSAR clause sets. Triggers:
- GSA Schedule, MAS, SIN,
GSA Schedule Contract
Draft an execution-ready GSA Schedule contract with verified FAR/GSAR clause set, pricing framework, and compliance obligations.
Prerequisites
Collect before drafting:
- Contractor identity: SAM legal name, UEI, CAGE, DBA(s), address, authorized signatory
- Solicitation: current MAS solicitation version, clause list, class deviations
- SINs: awarded SINs with descriptions; legacy-to-MAS crosswalk if applicable
- Pricing: Commercial Sales Practices, Basis of Award, negotiated discounts, Authorized Price List
- IFF: current rate, reporting portal, cadence
- TAA: country of origin data, substantial transformation analyses
- IT accessibility: VPAT/ACR if IT in scope
- Cybersecurity: NIST, FedRAMP, CUI requirements if applicable
- Reps/certs: size, socioeconomic, FAR 52.204-24/25
- Subcontractors: list and required flow-down terms
Contract Structure
Use this section order:
- Cover Sheet / Contract Summary
- Parties and Authority
- Contract Period and Effective Dates
- Schedule Designation and Scope
- SINs and Scope Details
- Ordering Procedures and Order-Level Terms
- Pricing, Discounts, and Authorized Price List
- Price Reductions (PRC) and Notifications
- Economic Price Adjustment (EPA) — if applicable
- Industrial Funding Fee (IFF) and Sales Reporting
- Trade Agreements Act (TAA)
- IT Accessibility (Section 508) — if applicable
- Cybersecurity and Incident Reporting — if applicable
- Subcontracting and Flow-Down Requirements
- Contract Administration and Modifications
- Audit Rights and Record Retention
- Disputes and CDA Clause
- Delivery, Performance, QA, and Warranties
- Representations and Certifications
- Attachments and Incorporated Documents
Required Tables
Cover Sheet — contract number, contractor name/UEI/CAGE, schedule designation, awarded SINs, base/option periods, CO and contractor POC. Source each field (GSA, SAM, Solicitation, Award, Contractor).
SIN Scope — per SIN: current title (verbatim from solicitation), contractor offerings, scope limits, certifications.
Legacy SIN Crosswalk (if applicable) — legacy SIN → current MAS SIN with in/out-of-scope confirmation.
Authorized Price List (appendix) — per item: SIN, item/service, part/service ID, unit, GSA price, commercial price, discount %, MOQ, lead time.
TAA Compliance — per item: country of origin, TAA designated (Y/N), substantial transformation basis (CBP ruling/analysis).
Section 508 (if IT scope) — per product: VPAT/ACR version, conformance level, exceptions.
Cybersecurity (if applicable) — CUI handling (NIST SP 800-171), FedRAMP auth level, incident reporting process.
Clause Matrix — all clauses incorporated by reference: clause number, title, date, applicability. Must include at minimum: FAR 52.212-4, FAR 52.212-5, GSAR 552.238-74, GSAR 552.238-81, GSAR 552.238-82.
Subcontractor Flow-Downs — per clause: flow-down required (Y/N), subcontract type (supply/service/IT).
Pricing and IFF Blocks
Insert from current GSAR clause text — do not paraphrase:
Pricing relationship: Basis of Award customer/category, commercial discount to Basis of Award, negotiated GSA discount, pricing relationship rule.
PRC (GSAR 552.238-81): clause number/title/date, notification window in days, effective date rule.
EPA (if applicable): clause number/title/date, index name, cap (max %/period), required documentation, CO modification approval.
IFF (GSAR 552.238-74): rate (verify current), reporting portal name, cadence with due date rule, pass-through prohibition — IFF never separately charged to ordering agencies.
Administrative Provisions
- Modifications only by CO-signed written mods
- Audit rights per applicable FAR/GSAR clauses
- Record retention per clause-specified duration
- Disputes: FAR 52.233-1 with CDA references
Compliance Checks
- Verify all FAR/GSAR clause numbers, titles, and dates against official sources; mark
[VERIFY]when uncertain. - Never assume IFF rate, period lengths, or PRC notification windows — insert from current solicitation/GSAR.
- Use incorporation by reference unless solicitation requires full text.
- Use UEI only — DUNS is obsolete.
- TAA, Section 508, cybersecurity, and PRC must use current clause text verbatim; do not paraphrase.
- If solicitation or mass modification conflicts with legacy terms, flag the conflict and adopt the current requirement with citation.
- IFF must not appear as a separate line item to ordering agencies.
Related Skills
casemark/skills/legal/automated-contract-summary
development
VerifiedTrustedCommunity
name: automated-contract-summary language: en description: Generates structured executive summaries of contracts using ML — captures key terms, party obligations, risk allocations, and compliance requirements in a standardized format. Optimized for high-volume review where speed and consistency matter. tags: - summarization - agreement - corporate --- # Automated Contract Summarization Produces standardized executive summaries of contracts using machine learning, capturing essential term
21SKILL.mdUpdated May 26, 2026
casemark/obligation-mapping
tools
VerifiedTrustedCommunity
Extracts regulatory obligations from dense regulations across jurisdictions. Breaks down multi-level regulations into clear article-level obligations, classifies applicability to a business, and prioritizes by risk level. Use when translating regulations into actionable compliance requirements.
21SKILL.mdUpdated May 25, 2026
casemark/horizon-scanning
development
VerifiedTrustedCommunity
Continuously monitors regulatory landscapes for changes relevant to a specific business. Ingests global regulatory updates, filters by relevance, summarizes impact, and produces an actionable change advisory. Use when tracking regulatory developments affecting a particular product or market.
21SKILL.mdUpdated May 25, 2026
casemark/gap-analysis
testing
VerifiedTrustedCommunity
Compares an organization's existing compliance controls, policies, and procedures against extracted regulatory obligations to identify coverage gaps. Produces a remediation plan with prioritized actions. Use when assessing compliance maturity or preparing for regulatory audits.
21SKILL.mdUpdated May 25, 2026