Legal Strategy — CLO/General Counsel Methodology
CLO-level methodology for legal strategy, regulatory compliance, IP management, contract risk, data privacy, corporate governance, and employment law. This skill provides the frameworks and reference material for a chief legal officer or general counsel profile.
When to Load
| Trigger |
What's Needed |
| Regulatory compliance analysis |
references/regulatory-analysis.md — GDPR, CCPA, AI Act, HIPAA, cross-border transfers |
| IP strategy development |
references/ip-strategy.md — patents, trademarks, trade secrets, open source licensing |
| Contract risk assessment |
references/contract-risk.md — indemnification, liability caps, force majeure, DPA |
| Data privacy framework design |
references/data-privacy.md — privacy-by-design, DPIAs, data mapping, breach response |
| Corporate governance counsel |
references/regulatory-analysis.md — board duties, fiduciary obligations |
| Employment law consideration |
references/ip-strategy.md — IP assignment, classification, non-competes |
Loading Order
skill_view('legal-strategy')
# Then domain-specific references:
skill_view('legal-strategy', file_path='references/regulatory-analysis.md')
skill_view('legal-strategy', file_path='references/ip-strategy.md')
skill_view('legal-strategy', file_path='references/contract-risk.md')
skill_view('legal-strategy', file_path='references/data-privacy.md')
Reference Files
| Reference |
Purpose |
references/regulatory-analysis.md |
GDPR, CCPA, AI Act risk categories, sector-specific (HIPAA, SOX, GLBA, PCI DSS), children's privacy, cross-border data transfers |
references/ip-strategy.md |
Patent types and process, trademark clearance and registration, trade secret management, open source licensing (permissive/copyleft), IP portfolio management |
references/contract-risk.md |
Indemnification clauses, liability cap tiers, force majeure (post-COVID), limitation of liability, data protection addenda, contract lifecycle management, risk scoring |
references/data-privacy.md |
Privacy-by-design (7 principles), DPIA process, data mapping/RoPA, breach response checklist, vendor privacy assessment |
references/decision-workflow.md |
Jurisdictional risk triage, counsel escalation, worked example, reusable memo, and owner routing matrix |
Output Contract
The profile using this skill produces artifact pyramids. The response to any caller is the absolute path to 00-index.md. See artifact-pyramids skill for the specification.
Safety and Escalation
This methodology supports issue spotting and questions for counsel; it is not legal advice. Do not present a jurisdiction-specific conclusion as settled law. Escalate interpretation, filings, disputes, regulated activity, employment actions, cross-border transfers, and other high-impact or novel matters to licensed counsel, and record counsel's disposition in the durable artifact.
When not to use
- Do not use for legal advice, filings, or jurisdiction-specific conclusions; escalate to licensed counsel.
- Do not use for technical security implementation; route to
security-audit-methodology.
Related Skills
artifact-pyramids — output contractsecurity-audit-methodology — technical security posture (complementary to privacy/regulatory)opensource-contributions — open source contribution compliance and CLAs
1---2name: legal-strategy3description: Analyze legal and regulatory risk, IP, contracts, privacy, governance, and employment questions as structured issue-spotting for counsel. Do not use this methodology as legal advice or for technical security implementation, CRM, or delivery execution.4license: MIT5---67# Legal Strategy — CLO/General Counsel Methodology89CLO-level methodology for legal strategy, regulatory compliance, IP management, contract risk, data privacy, corporate governance, and employment law. This skill provides the frameworks and reference material for a chief legal officer or general counsel profile.1011## When to Load1213| Trigger | What's Needed |14|---------|---------------|15| Regulatory compliance analysis | `references/regulatory-analysis.md` — GDPR, CCPA, AI Act, HIPAA, cross-border transfers |16| IP strategy development | `references/ip-strategy.md` — patents, trademarks, trade secrets, open source licensing |17| Contract risk assessment | `references/contract-risk.md` — indemnification, liability caps, force majeure, DPA |18| Data privacy framework design | `references/data-privacy.md` — privacy-by-design, DPIAs, data mapping, breach response |19| Corporate governance counsel | `references/regulatory-analysis.md` — board duties, fiduciary obligations |20| Employment law consideration | `references/ip-strategy.md` — IP assignment, classification, non-competes |2122## Loading Order2324```text25skill_view('legal-strategy')26# Then domain-specific references:27skill_view('legal-strategy', file_path='references/regulatory-analysis.md')28skill_view('legal-strategy', file_path='references/ip-strategy.md')29skill_view('legal-strategy', file_path='references/contract-risk.md')30skill_view('legal-strategy', file_path='references/data-privacy.md')31```3233## Reference Files3435| Reference | Purpose |36|-----------|---------|37| `references/regulatory-analysis.md` | GDPR, CCPA, AI Act risk categories, sector-specific (HIPAA, SOX, GLBA, PCI DSS), children's privacy, cross-border data transfers |38| `references/ip-strategy.md` | Patent types and process, trademark clearance and registration, trade secret management, open source licensing (permissive/copyleft), IP portfolio management |39| `references/contract-risk.md` | Indemnification clauses, liability cap tiers, force majeure (post-COVID), limitation of liability, data protection addenda, contract lifecycle management, risk scoring |40| `references/data-privacy.md` | Privacy-by-design (7 principles), DPIA process, data mapping/RoPA, breach response checklist, vendor privacy assessment |41| `references/decision-workflow.md` | Jurisdictional risk triage, counsel escalation, worked example, reusable memo, and owner routing matrix |4243## Output Contract4445The profile using this skill produces artifact pyramids. The response to any caller is the absolute path to `00-index.md`. See `artifact-pyramids` skill for the specification.4647## Safety and Escalation4849This methodology supports issue spotting and questions for counsel; it is not legal advice. Do not present a jurisdiction-specific conclusion as settled law. Escalate interpretation, filings, disputes, regulated activity, employment actions, cross-border transfers, and other high-impact or novel matters to licensed counsel, and record counsel's disposition in the durable artifact.5051## When not to use5253- Do not use for legal advice, filings, or jurisdiction-specific conclusions; escalate to licensed counsel.54- Do not use for technical security implementation; route to `security-audit-methodology`.5556## Related Skills5758- `artifact-pyramids` — output contract59- `security-audit-methodology` — technical security posture (complementary to privacy/regulatory)60- `opensource-contributions` — open source contribution compliance and CLAs
magnus919