Missing Protections — Contract Gap Finder
Audits a contract against a comprehensive checklist of protections that should
be present based on the contract type, flags every gap, rates its urgency, and
provides ready-to-insert clause language drawn from industry-standard templates.
Overview
What a contract does not say is often more dangerous than what it does. Silence
on key protections means the default rules of the governing jurisdiction apply
— and those defaults rarely favor the weaker party.
This skill checks the contract against 15 universal protections that every
agreement should contain, plus type-specific protections tailored to the
contract category. For each missing protection, it explains the risk of
omission and provides suggested clause language based on CommonPaper open-source
templates (CC BY 4.0) and widely accepted market standards.
Prerequisites
- A contract must be provided as a file path or pasted text.
- The user should specify which party they represent. If not specified, the
analysis defaults to the party that did not draft the contract.
Instructions
Read the full contract. Use the Read tool if a file path is provided.
Classify the contract type to select the appropriate checklist:
- Employment Agreement
- Independent Contractor / Freelance Agreement
- Non-Disclosure Agreement (NDA)
- Master Services Agreement (MSA)
- Software License / SaaS Agreement
- Terms of Service / Terms of Use
- Partnership / Joint Venture Agreement
- Other (apply universal checklist only)
Check the 15 universal protections. Every contract should address:
| # |
Protection |
What to Look For |
| 1 |
Limitation of Liability |
Cap on total damages (ideally mutual) |
| 2 |
Indemnification Scope |
Clear boundaries on who indemnifies whom and for what |
| 3 |
Termination for Convenience |
Either party can exit with reasonable notice |
| 4 |
Termination for Cause |
Right to terminate if the other party breaches, with cure period |
| 5 |
Cure Period |
Time to fix a breach before termination triggers |
| 6 |
Notice Requirements |
How and where notices must be delivered |
| 7 |
Force Majeure |
Excuse for non-performance due to extraordinary events |
| 8 |
Dispute Resolution |
Defined process (mediation, arbitration, or litigation) |
| 9 |
Governing Law |
Which jurisdiction's law applies |
| 10 |
Assignment Restrictions |
Cannot assign without consent |
| 11 |
Amendment Requirements |
Changes require written mutual agreement |
| 12 |
Severability |
Invalid clauses do not void the entire contract |
| 13 |
Entire Agreement |
Contract supersedes prior discussions |
| 14 |
Confidentiality |
Protection for sensitive information exchanged |
| 15 |
Data Protection |
Compliance with applicable privacy laws (GDPR, CCPA) |
Check type-specific protections. Apply the additional checklist for the
classified contract type:
Employment Agreements: Background IP carve-out, overtime/exempt
classification, benefits vesting schedule, post-termination obligations
clarity, whistleblower protections, non-compete geographic/temporal limits.
Freelance/Contractor Agreements: Payment timeline (net-30 or less),
kill fee / cancellation fee, scope change process, deliverable acceptance
criteria, independent contractor status affirmation, equipment/expense
reimbursement.
NDAs: Mutual vs. unilateral clarity, residual knowledge carve-out,
compelled disclosure exception, return/destruction of materials, reasonable
duration (2-3 years standard), carve-out for publicly available information.
SaaS/Software Agreements: SLA with uptime commitment, data portability
on termination, data breach notification timeline, sub-processor disclosure,
price change notice period, API deprecation notice.
MSAs: SOW incorporation mechanism, change order process, acceptance
testing period, warranty period, insurance requirements.
Rate each missing protection by urgency:
| Rating |
Criteria |
| CRITICAL |
Absence creates immediate, significant financial or legal risk. Must be added before signing. |
| IMPORTANT |
Absence creates meaningful risk that should be addressed. Negotiate to include. |
| RECOMMENDED |
Best practice that strengthens position. Include if possible. |
Provide suggested clause language. For each missing protection rated
CRITICAL or IMPORTANT, provide:
- A ready-to-insert clause written in standard contract language
- A note on where it should be placed in the contract
- The source or pattern it follows (e.g., "Based on CommonPaper MSA v4,
Section 8.3")
Summarize the protection coverage score:
Universal protections present: X / 15
Type-specific protections present: Y / Z
Overall coverage: [percentage]%
Output
Filename: MISSING-PROTECTIONS-{contract-name-or-type}.md
# Missing Protections Report
## Contract Summary
## Protection Coverage Score
| Category | Present | Missing | Coverage |
## Critical Missing Protections
### 1. [Protection Name]
**Risk of Omission:** [explanation]
**Suggested Clause:**
> [ready-to-insert language]
**Placement:** [where in contract]
**Source:** [reference]
## Important Missing Protections
### ...
## Recommended Missing Protections
### ...
## Complete Checklist
| # | Protection | Status | Urgency |
## Disclaimer
Error Handling
| Failure Mode |
Cause |
Resolution |
| Unclassifiable contract |
Contract type does not match standard categories |
Apply universal checklist only; note limitation |
| Partial coverage |
Protection is addressed but incompletely |
Mark as "Partial" rather than present or missing; explain the gap |
| Jurisdiction-specific protections |
Some protections are required by local law |
Note when a protection is legally required vs. best practice |
| Referenced exhibits missing |
Contract references schedules with additional terms |
Note that coverage assessment is based on available text only |
| Conflicting clauses |
Two sections address the same protection differently |
Flag the conflict as a separate finding |
Examples
Example 1 — Freelance agreement missing critical protections:
User: What protections is this freelance contract missing? I am the freelancer.
Protection Coverage: 8/15 universal, 2/6 type-specific (48%)
CRITICAL Missing Protections:
1. Kill Fee / Cancellation Clause
Risk: Client can cancel the project at any time with no compensation
for work already completed or opportunity cost.
Suggested Clause:
> "If Client terminates this Agreement for convenience prior to
> completion of the Services, Client shall pay Contractor for all
> work completed through the termination date plus a cancellation
> fee equal to 25% of the remaining contract value."
Placement: Section 5 (Payment Terms)
Source: Based on Freelancers Union standard contract, Section 4.2
2. Payment Timeline
Risk: No payment deadline specified. Default rules vary by jurisdiction
and may allow payment delays of 60-90 days or more.
Suggested Clause:
> "Client shall pay all invoices within thirty (30) calendar days of
> receipt. Invoices unpaid after 30 days shall accrue interest at the
> rate of 1.5% per month or the maximum rate permitted by law."
Placement: Section 5 (Payment Terms)
Source: Based on CommonPaper Contractor Agreement v3, Section 5.1
Example 2 — SaaS agreement with partial protections:
User: Check ~/contracts/vendor-saas-agreement.pdf for missing protections.
CRITICAL: No data breach notification timeline.
The contract mentions "reasonable" notification but sets no deadline.
Under GDPR Article 33, processors must notify within 72 hours.
Under CCPA, notification must occur "in the most expedient time possible."
Suggested Clause:
> "In the event of a Security Incident affecting Customer Data,
> Provider shall notify Customer in writing within seventy-two (72)
> hours of becoming aware of the incident, including a description
> of the nature of the incident, categories of data affected,
> approximate number of records involved, and remedial measures
> taken or proposed."
Placement: After Section 9.2 (Data Security)
Source: Based on GDPR Article 33; CommonPaper DPA v2, Section 6
Resources
Legal Disclaimer: This skill provides AI-generated gap analysis for
informational and educational purposes only. Suggested clause language is based
on publicly available templates and common market standards — it has not been
reviewed by an attorney for your specific situation. This does not constitute
legal advice, create an attorney-client relationship, or substitute for
consultation with a qualified attorney. Protection requirements vary by
jurisdiction and contract context. Always have suggested clauses reviewed by a
licensed attorney before inserting them into a binding agreement.
1---2name: missing-protections3description: Audits a contract against type-specific protection checklists to find gaps, then provides ready-to-insert clause language for each missing protection. Use when a user wants to know what protections are absent from their contract. Trigger with "/missing-protections" or "what protections is this contract missing".4license: MIT5---6# Missing Protections — Contract Gap Finder
7
8Audits a contract against a comprehensive checklist of protections that should
9be present based on the contract type, flags every gap, rates its urgency, and
10provides ready-to-insert clause language drawn from industry-standard templates.
11
12## Overview
13
14What a contract does not say is often more dangerous than what it does. Silence
15on key protections means the default rules of the governing jurisdiction apply
16— and those defaults rarely favor the weaker party.
17
18This skill checks the contract against 15 universal protections that every
19agreement should contain, plus type-specific protections tailored to the
20contract category. For each missing protection, it explains the risk of
21omission and provides suggested clause language based on CommonPaper open-source
22templates (CC BY 4.0) and widely accepted market standards.
23
24## Prerequisites
25
26- A contract must be provided as a file path or pasted text.
27- The user should specify which party they represent. If not specified, the
28 analysis defaults to the party that did not draft the contract.
29
30## Instructions
31
321. **Read the full contract.** Use the Read tool if a file path is provided.
33
342. **Classify the contract type** to select the appropriate checklist:
35 - Employment Agreement
36 - Independent Contractor / Freelance Agreement
37 - Non-Disclosure Agreement (NDA)
38 - Master Services Agreement (MSA)
39 - Software License / SaaS Agreement
40 - Terms of Service / Terms of Use
41 - Partnership / Joint Venture Agreement
42 - Other (apply universal checklist only)
43
443. **Check the 15 universal protections.** Every contract should address:
45
46 | # | Protection | What to Look For |
47 |---|-----------|-----------------|
48 | 1 | **Limitation of Liability** | Cap on total damages (ideally mutual) |
49 | 2 | **Indemnification Scope** | Clear boundaries on who indemnifies whom and for what |
50 | 3 | **Termination for Convenience** | Either party can exit with reasonable notice |
51 | 4 | **Termination for Cause** | Right to terminate if the other party breaches, with cure period |
52 | 5 | **Cure Period** | Time to fix a breach before termination triggers |
53 | 6 | **Notice Requirements** | How and where notices must be delivered |
54 | 7 | **Force Majeure** | Excuse for non-performance due to extraordinary events |
55 | 8 | **Dispute Resolution** | Defined process (mediation, arbitration, or litigation) |
56 | 9 | **Governing Law** | Which jurisdiction's law applies |
57 | 10 | **Assignment Restrictions** | Cannot assign without consent |
58 | 11 | **Amendment Requirements** | Changes require written mutual agreement |
59 | 12 | **Severability** | Invalid clauses do not void the entire contract |
60 | 13 | **Entire Agreement** | Contract supersedes prior discussions |
61 | 14 | **Confidentiality** | Protection for sensitive information exchanged |
62 | 15 | **Data Protection** | Compliance with applicable privacy laws (GDPR, CCPA) |
63
644. **Check type-specific protections.** Apply the additional checklist for the
65 classified contract type:
66
67 **Employment Agreements:** Background IP carve-out, overtime/exempt
68 classification, benefits vesting schedule, post-termination obligations
69 clarity, whistleblower protections, non-compete geographic/temporal limits.
70
71 **Freelance/Contractor Agreements:** Payment timeline (net-30 or less),
72 kill fee / cancellation fee, scope change process, deliverable acceptance
73 criteria, independent contractor status affirmation, equipment/expense
74 reimbursement.
75
76 **NDAs:** Mutual vs. unilateral clarity, residual knowledge carve-out,
77 compelled disclosure exception, return/destruction of materials, reasonable
78 duration (2-3 years standard), carve-out for publicly available information.
79
80 **SaaS/Software Agreements:** SLA with uptime commitment, data portability
81 on termination, data breach notification timeline, sub-processor disclosure,
82 price change notice period, API deprecation notice.
83
84 **MSAs:** SOW incorporation mechanism, change order process, acceptance
85 testing period, warranty period, insurance requirements.
86
875. **Rate each missing protection by urgency:**
88
89 | Rating | Criteria |
90 |--------|----------|
91 | **CRITICAL** | Absence creates immediate, significant financial or legal risk. Must be added before signing. |
92 | **IMPORTANT** | Absence creates meaningful risk that should be addressed. Negotiate to include. |
93 | **RECOMMENDED** | Best practice that strengthens position. Include if possible. |
94
956. **Provide suggested clause language.** For each missing protection rated
96 CRITICAL or IMPORTANT, provide:
97 - A ready-to-insert clause written in standard contract language
98 - A note on where it should be placed in the contract
99 - The source or pattern it follows (e.g., "Based on CommonPaper MSA v4,
100 Section 8.3")
101
1027. **Summarize the protection coverage score:**
103
104 ```
105 Universal protections present: X / 15
106 Type-specific protections present: Y / Z
107 Overall coverage: [percentage]%
108 ```
109
110## Output
111
112**Filename:** `MISSING-PROTECTIONS-{contract-name-or-type}.md`
113
114```
115# Missing Protections Report
116## Contract Summary
117## Protection Coverage Score
118| Category | Present | Missing | Coverage |
119## Critical Missing Protections
120### 1. [Protection Name]
121**Risk of Omission:** [explanation]
122**Suggested Clause:**
123> [ready-to-insert language]
124**Placement:** [where in contract]
125**Source:** [reference]
126## Important Missing Protections
127### ...
128## Recommended Missing Protections
129### ...
130## Complete Checklist
131| # | Protection | Status | Urgency |
132## Disclaimer
133```
134
135## Error Handling
136
137| Failure Mode | Cause | Resolution |
138|--------------|-------|------------|
139| Unclassifiable contract | Contract type does not match standard categories | Apply universal checklist only; note limitation |
140| Partial coverage | Protection is addressed but incompletely | Mark as "Partial" rather than present or missing; explain the gap |
141| Jurisdiction-specific protections | Some protections are required by local law | Note when a protection is legally required vs. best practice |
142| Referenced exhibits missing | Contract references schedules with additional terms | Note that coverage assessment is based on available text only |
143| Conflicting clauses | Two sections address the same protection differently | Flag the conflict as a separate finding |
144
145## Examples
146
147**Example 1 — Freelance agreement missing critical protections:**
148
149> User: What protections is this freelance contract missing? I am the freelancer.
150
151```
152Protection Coverage: 8/15 universal, 2/6 type-specific (48%)
153
154CRITICAL Missing Protections:
155
1561. Kill Fee / Cancellation Clause
157 Risk: Client can cancel the project at any time with no compensation
158 for work already completed or opportunity cost.
159 Suggested Clause:
160 > "If Client terminates this Agreement for convenience prior to
161 > completion of the Services, Client shall pay Contractor for all
162 > work completed through the termination date plus a cancellation
163 > fee equal to 25% of the remaining contract value."
164 Placement: Section 5 (Payment Terms)
165 Source: Based on Freelancers Union standard contract, Section 4.2
166
1672. Payment Timeline
168 Risk: No payment deadline specified. Default rules vary by jurisdiction
169 and may allow payment delays of 60-90 days or more.
170 Suggested Clause:
171 > "Client shall pay all invoices within thirty (30) calendar days of
172 > receipt. Invoices unpaid after 30 days shall accrue interest at the
173 > rate of 1.5% per month or the maximum rate permitted by law."
174 Placement: Section 5 (Payment Terms)
175 Source: Based on CommonPaper Contractor Agreement v3, Section 5.1
176```
177
178**Example 2 — SaaS agreement with partial protections:**
179
180> User: Check ~/contracts/vendor-saas-agreement.pdf for missing protections.
181
182```
183CRITICAL: No data breach notification timeline.
184The contract mentions "reasonable" notification but sets no deadline.
185Under GDPR Article 33, processors must notify within 72 hours.
186Under CCPA, notification must occur "in the most expedient time possible."
187
188Suggested Clause:
189> "In the event of a Security Incident affecting Customer Data,
190> Provider shall notify Customer in writing within seventy-two (72)
191> hours of becoming aware of the incident, including a description
192> of the nature of the incident, categories of data affected,
193> approximate number of records involved, and remedial measures
194> taken or proposed."
195Placement: After Section 9.2 (Data Security)
196Source: Based on GDPR Article 33; CommonPaper DPA v2, Section 6
197```
198
199## Resources
200
201- [CommonPaper Standard Contracts](https://commonpaper.com/) — Open-source
202 contract templates with balanced protections (CC BY 4.0). Templates for NDA,
203 MSA, SaaS, DPA, and Contractor agreements.
204- [ICO (UK) — Data Protection Clause Guidance](https://ico.org.uk/) —
205 Information Commissioner's Office guidance on data protection contract terms.
206- [California Attorney General — CCPA Contract Requirements](https://oag.ca.gov/privacy/ccpa)
207 — Required contract provisions for service providers under CCPA.
208- [GDPR Articles 28, 32, 33](https://gdpr-info.eu/) — Data processing
209 agreement requirements, security measures, and breach notification.
210- [FTC — Unfair Contract Terms](https://www.ftc.gov/) — Federal Trade
211 Commission guidance on unfair or one-sided contract provisions.
212- [Freelancers Union — Model Contract](https://www.freelancersunion.org/) —
213 Standard freelancer protections and contract language.
214
215---
216
217**Legal Disclaimer:** This skill provides AI-generated gap analysis for
218informational and educational purposes only. Suggested clause language is based
219on publicly available templates and common market standards — it has not been
220reviewed by an attorney for your specific situation. This does not constitute
221legal advice, create an attorney-client relationship, or substitute for
222consultation with a qualified attorney. Protection requirements vary by
223jurisdiction and contract context. Always have suggested clauses reviewed by a
224licensed attorney before inserting them into a binding agreement.