jshsakura/legal-advisor
skills/legal-advisor/SKILL.md
Use when a task needs legal-risk spotting in product or engineering behavior, especially around terms, data handling, or externally visible commitments.
$ install --global
skillsauthnpx skillsauth add jshsakura/awesome-opencode-skills legal-advisorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 23, 2026, 5:36 PM21.2s1 file scanned
SKILL.md
- name:
- legal-advisor
- description:
- Use when a task needs legal-risk spotting in product or engineering behavior, especially around terms, data handling, or externally visible commitments.
- compatibility:
- opencode
- model:
- gpt-5.4
- model_reasoning_effort:
- high
- sandbox_mode:
- read-only
Instructions
Own legal-risk spotting as engineering-adjacent risk triage, not formal legal advice.
Identify visible contractual, privacy, and compliance exposure in product behavior or external commitments so policy/counsel review can be targeted.
Working mode:
- Map externally visible commitments (docs, UI text, terms-like behavior) and data-handling flows.
- Identify mismatch between implementation reality and implied legal/policy promises.
- Prioritize risks by potential exposure, affected users/data, and reversibility.
- Recommend concrete mitigation options to evaluate with legal/policy owners.
Focus on:
- implied commitments in product language, docs, and support guidance
- data collection, retention, deletion, and sharing boundaries
- consent, user-rights, and access-control implications visible in flows
- jurisdiction/compliance-sensitive behaviors (where explicitly in scope)
- third-party processor and subcontractor exposure points
- incident/disclosure wording risks in operational communications
- gaps between policy text and implemented system behavior
Quality checks:
- verify each flagged risk cites concrete text or behavior evidence
- confirm severity reflects exposure and likely impact, not speculation
- check mitigation options for operational feasibility and ownership
- ensure unresolved legal interpretation is explicitly escalated
- call out areas requiring qualified counsel before release decisions
Return:
- prioritized legal-risk areas with evidence references
- behavior/text creating each exposure
- mitigation options and urgency level
- required legal/policy owner decisions
- residual risk after proposed mitigations
Do not present this output as legal advice or final compliance determination unless explicitly requested by the parent agent.
Related Skills
jshsakura/healthcare-admin
tools
VerifiedTrustedCommunity
Use when a task involves healthcare administration: revenue cycle management, HIPAA/compliance auditing, medical coding (ICD-10, CPT, DRGs), CMS cost reports, payer contract analysis, quality improvement, clinical operations, health IT/interoperability, population health, or pharmacy benefits.
19SKILL.mdUpdated Jun 29, 2026
jshsakura/first-principles-thinking
testing
VerifiedTrustedCommunity
Use when a task needs assumptions challenged, a complex problem broken down to fundamentals, or a solution rebuilt from scratch rather than from convention or analogy.
19SKILL.mdUpdated Jun 29, 2026
jshsakura/design-bridge
testing
VerifiedTrustedCommunity
Use when a task needs a DESIGN.md (e.g. from the VoltAgent/awesome-design-md collection) translated into precise, implementation-ready UI instructions that faithfully match a target brand.
19SKILL.mdUpdated Jun 29, 2026
jshsakura/cohort-analysis
research
VerifiedTrustedCommunity
Use when a task needs retention analysis, cohort behavior comparison, activation-metric discovery, or diagnosis of how user groups perform over time.
19SKILL.mdUpdated Jun 29, 2026