Directory / commercial-legal (claude-for-legal)
commercial-legal (claude-for-legal)
StrongTen skills for in-house commercial legal work: NDA review, vendor agreement playbooks, renewal tracking, escalation routing, and SaaS MSA review.
Verdict
Commercial-legal is the most thoughtfully designed first-party plugin in this wave. Ten skills coordinate a full contract workflow — intake interview, NDA review, playbook-based agreement review, escalation routing, amendment history, stakeholder summaries, and renewal tracking — all wired together via cross-skill handoffs. The security thinking is exceptional for a prompt-only plugin: an explicit prompt-injection defense in the intake interview, jurisdiction-aware attorney-privilege warnings, and HTML-escaping instructions for counterparty-supplied strings. The practice profile writes to a scoped ~/.claude path with full disclosure. Install it if you're in-house commercial and tired of explaining your playbook from scratch every session.
Install
Audit receipts
Every listing is verified against a specific commit. These are the receipts.
Ten skills plus three agent files. Writes practice profile config to ~/.claude/plugins/config/claude-for-legal/commercial-legal/ — scoped and documented. hooks.json is present but empty.
All file operations are local reads/writes on the user's machine at the disclosed config path. The CLAUDE.md template explicitly warns that "PRIVILEGED & CONFIDENTIAL" is a US-only doctrine, and instructs Claude not to assert it in non-US contexts. The plugin includes an explicit prompt-injection defense in cold-start-interview: "Setup does not read your personal Claude history, unrelated conversations, or your home-directory CLAUDE.md."