Nexus Legal Analyzer

Legal RAG with GDPR, EU AI Act compliance, contract analysis, and regulatory monitoring.

Security Scan

The skill is an instruction-only legal analysis helper whose declared purpose, required resources, and instructions are internally consistent; nothing in the package requests unrelated credentials, installs, or system access.

Purpose & Capability

Name, description, and listed capabilities (contract clause extraction, GDPR/EU AI Act checks, regulatory monitoring) align with a legal RAG-style tool and the SKILL.md does not request unrelated binaries, credentials, or config paths.

Instruction Scope

The SKILL.md is high-level and procedural (receive task, analyze with department-specific engines, cross-validate, return findings). It does not instruct reading local files, environment variables, or external endpoints, but is vague about where source documents come from and how cross-validation is performed — this gives the agent broad discretion which could affect sensitive data handling depending on implementation.

Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded by the skill itself.

Credentials

No environment variables, credentials, or config paths are requested. The declared requirements are proportionate to the stated functionality.

Persistence & Privilege

Skill is not marked always:true and uses default autonomy settings. It does not request permanent system presence or access to other skills' configs.

Assessment

This skill appears coherent and non-malicious, but it's high-level and leaves implementation details unspecified. Before installing or using it: (1) confirm how documents and sources will be provided and stored (do not feed sensitive contracts unless you trust the agent's storage/retention policy); (2) ask where 'department-specific engines' and citation sources live (local enterprise repositories vs. external public web) and whether any external APIs will be called; (3) verify logging, retention, and access controls for any analysis outputs; (4) if you need enterprise features (volume pricing, outcome-based contracts), request a formal SLA and auditor-visible data flows; and (5) if you require stronger guarantees, ask the maintainer for a more detailed SKILL.md or source code that shows how data is handled and which external endpoints (if any) are used.

Capabilities

• Contract clause extraction
• Regulatory compliance check
• GDPR/EU AI Act analysis
• Jurisprudence search
• Risk assessment

Workflow

1. Receive task description and target context
2. Analyze using department-specific engines (legal)
3. Generate findings with severity classification
4. Produce improvement proposals with impact/effort scoring
5. Cross-validate with synergy departments
6. Return structured results with confidence scores

Pricing

• Per-execution: $3.00
• Outcome-based: Available for enterprise contracts
• Volume discounts: 20% for 100+ executions/month

Guidelines

• All outputs include confidence scores and source citations
• Cross-validation requires minimum 2 independent sources
• Findings are classified: CRITICAL, HIGH, MEDIUM, LOW, INFO
• Proposals include impact (1-10), effort (1-10), and priority score