Contract Review Toolkit

Turn a $500+ contract review into a 10-minute local analysis with clause-by-clause risk scoring, included with your subscription.

The Contract Review Toolkit analyzes contracts for risky clauses, missing protections, and one-sided terms using local AI risk scoring. No expensive SaaS subscriptions. All processing happens within the Cowork environment. Customizable risk policies for your industry.

---

Important: All documents generated by this plugin are drafts intended as starting points. Legal documents must be reviewed by a qualified attorney before execution. This plugin does not provide legal advice and output may not reflect current laws in your jurisdiction.

Installation

1. Download the pf-contract-review.plugin file
2. Open Claude Desktop and navigate to Settings > Plugins
3. Click Install Plugin and select the downloaded .plugin file
4. The plugin will be installed and available immediately

Note: All data stays local on your machine. No external API calls or cloud storage required.

Why This Exists

SMBs and freelancers receive contracts (vendor agreements, NDAs, service agreements, partnerships) that need review. Without in-house counsel, they either:

• Pay $300-6,000+/year for AI contract review tools (LawGeex, ContractCrab, Bind Legal)
• Spend $200-500/hour for attorney review
• Sign without understanding the risks

This plugin provides deep clause-by-clause risk analysis, locally, at included with your subscription.

---

Quick Start

1. Install & Initialize

/cr:setup

Creates workspace folders, checks dependencies, generates default risk policy config.

2. Parse Your First Contract

/cr:parse /path/to/contract.txt
# or paste contract text when prompted

Extracts parties, clauses, dates, key terms into structured JSON.

3. Run Full Analysis

/cr:review
# or run individual stages:
/cr:analyze      # Score clauses for risk
/cr:compare      # Benchmark against your preferred terms
/cr:report       # Generate professional DOCX report

Output: outbound/contract-risk-report.docx — ready to share with stakeholders or legal counsel.

---

Commands Reference

Command	Purpose	Input	Output
/cr:setup	Initialize workspace	Working directory path	Folders, config.json
/cr:parse	Extract contract structure	Contract file or text	processing/cr-parsed.json
/cr:analyze	Score clauses for risk	processing/cr-parsed.json	processing/cr-analyzed.json
/cr:compare	Benchmark against your standards	All prior files + config.json	processing/cr-compared.json
/cr:report	Generate DOCX report	All prior files + config.json	outbound/contract-risk-report.docx
/cr:review	Full pipeline (parse → analyze → compare → report)	Contract file or text	All outputs
/cr:status	Show pipeline progress	(none)	Status summary

---

How It Works

Pipeline Stages

Input Contract
    ↓
[Parse] — Extract clauses, parties, dates
    ↓
processing/cr-parsed.json
    ↓
[Analyze] — Score risk across 8 categories
    ↓
processing/cr-analyzed.json
    ↓
[Compare] — Benchmark against your preferred terms
    ↓
processing/cr-compared.json
    ↓
[Report] — Generate professional DOCX
    ↓
outbound/contract-risk-report.docx

8+ Risk Categories with Legal Authority

The plugin analyzes clauses across these standard contract risk areas, each grounded in authoritative legal sources:

1. Indemnification — Party holds other harmless from claims/damages (Restatement §§ 344-349; UCC § 2-714/2-715)
2. Liability — Limits on damages (UCC § 2-302 unconscionability; § 2-719 modification of remedies)
3. Termination — Conditions under which contract can end (UCC § 2-309; Restatement §§ 235-243)
4. IP — Intellectual property ownership and licensing (17 USC § 101 work-for-hire; Cal. Lab. Code § 2870)
5. Confidentiality — Protection of sensitive information (DTSA 18 USC § 1836; UTSA)
6. Non-Compete — Restrictions on competing activities (Restatement § 188; Cal. B&P Code § 16600)
7. Payment — Payment terms, conditions, disputes (UCC § 2-310; Prompt Payment Act)
8. Governing Law — Jurisdiction and dispute resolution (Restatement Conflict of Laws § 187; FAA)

Industry-specific categories (when overlay active): HIPAA Guidance (45 CFR § 164), SOX Guidance (§§ 404/802), IP-Heavy (17 USC/35 USC), GDPR Guidance (Art. 28/33)

Severity Levels (ISO 31000 / COSO ERM)

• CRITICAL (80-100): Deal-breaker. ISO 31000 Extreme Risk. Attorney review required.
• HIGH (60-79): Significant unfavorable risk. ISO 31000 High Risk. Should negotiate.
• MEDIUM (40-59): Moderate concern. ISO 31000 Moderate Risk. Monitor.
• LOW (0-39): Minor issue. ISO 31000 Low Risk. Acceptable as-is.

7 Jurisdiction Presets

Pre-configured legal frameworks for: US-Federal (UCC/Restatement), US-California (B&P Code § 16600 non-compete ban), US-New York (GOL § 5-701), US-Delaware (DGCL), UK (UCTA 1977), EU (GDPR Art. 28), International/CISG.

4 Industry Compliance Overlays

Healthcare/HIPAA, Financial/SOX, Technology/IP-Heavy, EU/GDPR — each adds domain-specific risk categories, legal authorities, and compliance checklists.

Generated Report

The DOCX report includes:

• Executive Summary — Contract metadata, overall risk score with ISO 31000 mapping
• Risk Matrix — Visual breakdown of critical/high/medium/low findings
• Clause-by-Clause Findings — Every finding with: legal authority citation, description, why it matters, recommended action, suggested alternative language, enforceability assessment
• Missing Protections — Standard protections absent from the contract with legal basis
• Term Comparison — How contract deviates from your preferred terms with negotiation playbook (Opening/Fallback/Criteria/BATNA)
• Jurisdiction Context — Applicable laws, key authorities, enforceability concerns
• Industry Compliance Checklist — HIPAA/SOX/GDPR/IP requirements (if overlay active)
• Key Dates — Important contract dates for calendar reminders
• Recommended Next Steps — Action items for negotiation and signing
• Legal Disclaimers — Prominent notices that this is not legal advice

---

SaaS Alternatives Comparison

Feature	LawGeex	ContractCrab	Bind Legal	This Plugin
Clause-by-clause risk analysis	Full	Partial	Partial	Full
Risk severity scoring	Full	Partial	Partial	Full
Missing protections detection	Full	None	None	Full
Term comparison (vs preferred)	Full	None	None	Full
Suggested alternative language	Full	None	None	Full
DOCX risk report	Full	Partial	Partial	Full
Automated redlining	Full	None	None	None
E-signature integration	Full	None	None	None
Real-time collaboration	Full	Partial	None	None
Data stays local (privacy)	None	None	None	Full
Customizable risk policies	Full	None	None	Full
No subscription cost	None	None	None	Full

---

Feature Comparison Matrix

Core Features (12)

Feature	Description	This Plugin
Parse unstructured contracts	Extract clauses, parties, dates from raw text	✓ Full
Contract type classification	15+ types with governing law framework	✓ Full
Clause type taxonomy	15 primary types, 40+ sub-types with legal domain mapping	✓ Full
Risk severity scoring	Score each clause with ISO 31000/COSO ERM alignment	✓ Full
Legal authority citations	Every finding cites UCC/Restatement/statute	✓ Full
Enforceability assessment	Identify void/unenforceable clauses per jurisdiction	✓ Full
Confidence levels	Flag uncertain/ambiguous analyses for review	✓ Full
Missing protections	Identify absent protections with legal basis	✓ Full
Negotiation playbook	Harvard method — Opening/Fallback/Criteria/BATNA	✓ Full
DOCX report generation	Professional reports with legal citations	✓ Full
Anti-hallucination rules	Clause text never fabricated, always source-backed	✓ Full
Legal disclaimers	Prominent warnings that this is not legal advice	✓ Full

Jurisdiction & Industry Features (6)

Feature	Description	This Plugin
Jurisdiction presets	7 jurisdictions with tailored risk weights/authorities	✓ Full
Industry compliance overlays	4 overlays (HIPAA, SOX, GDPR, IP-Heavy)	✓ Full
Doctrine-based analysis	6 legal doctrines (unconscionability, contra proferentem, etc.)	✓ Full
UCC applicability detection	Auto-detect goods/services/mixed contracts	✓ Full
Cross-border indicators	CISG applicability, international transaction flags	✓ Full
Legal terms glossary	Plain-language definitions with authority citations	✓ Full

Advanced Features (6)

Feature	Description	This Plugin
Custom acceptable terms	Define golden-standard terms per clause type	✓ Full (config.json)
Workflow resumption	Resume from failed stage in pipeline	✓ Full
Contract history tracking	Track past reviews and metrics	✓ File-based
Multi-language support	Non-English contracts	⚠️ Works with warnings
Automated e-signature	DocuSign/HelloSign integration	✗ Out of scope
Automated redlining	Track-changes in Word document	✗ Out of scope

---

AI-Powered Features

• Clause Risk Scoring with Legal Citations: Analyzes every clause across 8+ risk categories with severity ratings and specific legal authority references (UCC, Restatement, federal statutes)
• Doctrine-Based Red Flag Detection: 6 foundational legal doctrines (unconscionability, illusory promises, penalty clauses, contra proferentem, implied good faith, lack of mutuality)
• Enforceability Assessment: Critical/high findings include enforceability analysis — identifies clauses that may be void or unenforceable in the applicable jurisdiction
• Jurisdiction-Aware Analysis: 7 jurisdiction presets with tailored risk weights, legal authorities, and enforceability rules
• Industry Compliance Overlays: 4 industry-specific analysis layers (HIPAA, SOX, GDPR, IP-Heavy) with compliance checklists
• Missing Protections Detection: Identifies absent standard protections with legal basis and suggested language
• Professional Negotiation Playbook: Harvard Negotiation Project methodology — Opening Position, Fallback, Objective Criteria, BATNA analysis
• Contract Taxonomy: 15+ contract types with governing law classification (UCC vs. common law vs. statutory)
• Legal Terms Glossary: Plain-language definitions of specialized legal terms with authority citations
• Executive Summary with ISO 31000 Mapping: Professional risk summary aligned to ISO 31000/COSO ERM frameworks
• Alternative Language Suggestions: Legally-grounded suggested language for problematic clauses
• Term Benchmarking with Industry Data: Compares contract terms against preferred standards with market benchmark context

---

Estimated Cost per Use

Disclaimer: Token estimates are approximate and based on typical usage patterns measured from skill prompt sizes. Actual costs vary with input data size, conversation length, and complexity. Estimates use Claude Sonnet 4.6 pricing ($3/1M input, $15/1M output). Cowork and Claude Desktop subscription users (Pro/Max/Team) are not charged per-token — these estimates apply only to direct Anthropic API usage. Running stages individually in fresh sessions uses fewer input tokens than running the full pipeline sequentially, because pipeline mode accumulates conversation history across stages.

Per skill (run individually in a fresh session):

Stage	Skill Prompt	User Input	Total Input	Output	Est. Cost
cr-report	~7.6K	~800	~12.1K	~6.0K	~$0.13
cr-compare	~5.3K	~800	~9.8K	~5.3K	~$0.11
cr-analyze	~7.3K	~800	~11.9K	~6.0K	~$0.13
cr-parse	~6.0K	~2.0K	~11.7K	~2.0K	~$0.07
Standalone total			~45.5K	~19.3K	~$0.43

Full pipeline (all stages in one session — context accumulates):

Stage	Base Input	+ History	Total Input	Output	Est. Cost
cr-report	~12.3K	0	~12.3K	~6.0K	~$0.13
cr-compare	~10.0K	~6.8K	~16.8K	~5.3K	~$0.13
cr-analyze	~12.1K	~12.9K	~24.9K	~6.0K	~$0.16
cr-parse	~11.9K	~19.7K	~31.6K	~2.0K	~$0.12
Pipeline total			~85.6K	~19.3K	~$0.55

Running the full pipeline once typically costs $0.38–$0.71 in API tokens (Claude Sonnet 4.6).

Known Limitations

Analysis Accuracy

• LLM-based analysis: Risk severity depends on Claude's legal knowledge. May miss jurisdiction-specific nuances or novel clause structures.

  • Mitigation: Confidence scores on all findings. Always recommend attorney review for critical/high findings.

• Contract formatting: Parsing accuracy depends on document structure. Well-formatted contracts work best.

  • Mitigation: Warns about unstructured contracts. Manual clause verification for edge cases.

Workflow

• No automated redlining: Cannot track changes in Word or propose revisions within contracts. User must manually incorporate suggested language.

  • Mitigation: Provides suggested alternative language for every flagged clause.

• No e-signature: Cannot integrate with DocuSign, HelloSign, or similar. No automated signing workflows.

  • Mitigation: Generate PDF/DOCX for stakeholder review, then use external tools for signing.

• No calendar reminders: Cannot send automated alerts for contract deadlines or renewal dates.

  • Mitigation: Report extracts key dates. User sets own calendar reminders.

• No persistent database: Contract analyses are file-based. No central portfolio search or contract inventory.

  • Mitigation: Each analysis saved as structured JSON. User can track via file system or spreadsheet.

Scope

• Single-user tool: Not designed for real-time multi-party collaboration.
• Individual contracts only: Analyzes one contract at a time. No batch processing.
• Review only: Does not draft, generate, or create contracts. Analyzes received contracts only.
• No AI negotiation drafting: Suggests language but requires user to incorporate into actual negotiation.

---

Context Guide

For SMB Owners / Managers

Use this plugin when:

• You receive vendor agreements, service contracts, NDAs
• You want to understand what you're signing before negotiating or involving counsel
• You need a quick risk assessment before escalating to attorney
• You want documentation of risks for stakeholder review

Don't use this for:

• Legal advice (consult an attorney for that)
• Complex M&A or partnership agreements (get professional review)
• Industry-specific contracts you don't understand (consult domain expert)

For Freelancers / Contractors

Use this plugin when:

• You receive client contracts, NDAs, scope documents
• You want to identify unfavorable terms before counter-signing
• You're building a contract knowledge base for your industry
• You want to propose standard terms in your agreements

For Smaller Legal Teams

Use this plugin to:

• Screen contracts before attorney review (reduces billable hours)
• Standardize risk assessment across your organization
• Document known risks and accepted terms
• Train non-lawyer staff on contract risks

---

Requirements

System Requirements

• Python 3.7+: Required for risk analysis and DOCX generation
• python-docx 0.8.11+: Required for DOCX report output (auto-installed by setup)
• 150+ MB disk space: For workspace folders and report files

Plugin Requirements

• Cowork Desktop or Claude Code: To run this plugin
• Claude Opus 4.6 or later: LLM powering the risk analysis
• Stable internet: For Claude API calls (analyses run locally, but use Claude's reasoning)

File Format Support

Input:

• .txt — Plain text contracts
• .md — Markdown contracts
• .docx — Word documents (extracts text)
• Pasted text directly

Output:

• .docx — Microsoft Word (primary)
• .md — Markdown (fallback if python-docx unavailable)
• .json — Intermediate analysis files (for programmatic use)

---

Getting Started

1. Install the plugin via Cowork or Claude Code
2. Run /cr:setup to initialize workspace
3. Run /cr:review with your first contract
4. Review the generated report (outbound/contract-risk-report.docx)
5. Share with stakeholders or legal counsel for negotiation
6. Customize acceptable terms in .cr/config.json for your industry

For detailed documentation on each command, see the COMMANDS.md guide.

---

Support

• Questions about the plugin? See the USER-GUIDE.md for plain-language explanations
• Technical issues? Check the CHANGELOG.md for known issues and workarounds
• Need legal advice? Consult a qualified attorney (this plugin is not a substitute for legal counsel)

---

License & Attribution

Contract Review Toolkit v1.1 Created with Plugin Factory

---

Next Steps

• Read USER-GUIDE.md for plain-language walkthrough
• Review CHANGELOG.md for release notes and known issues
• Run /cr:setup to get started

Important Disclaimers

• AI-Generated Content: This plugin uses AI (LLM) technology which can produce inaccurate or incomplete outputs. All content should be treated as a starting point and reviewed for accuracy before use.
• Not Professional Advice: Outputs do not constitute legal, financial, tax, medical, or other professional advice. Consult qualified professionals before making decisions based on generated content.
• No Compliance Guarantee: References to industry standards, regulations, or guidelines are for informational purposes only. This plugin does not guarantee compliance with any law or regulation. Users are responsible for verifying all outputs meet their specific regulatory requirements.
• No Endorsement or Affiliation: Mention of third-party products, standards, or organizations does not imply endorsement, partnership, or certification by those entities.
• Not Legal Advice: This plugin does not provide legal services or legal advice. All legal documents and analysis should be reviewed by a licensed attorney before use.