From faos-analyst
<!-- AUTO-GENERATED by export-plugins.py — DO NOT EDIT -->
npx claudepluginhub frank-luongt/faos-skills-marketplace --plugin faos-analystThis skill uses the workspace's default tool permissions.
Guides Next.js Cache Components and Partial Prerendering (PPR) with cacheComponents enabled. Implements 'use cache', cacheLife(), cacheTag(), revalidateTag(), static/dynamic optimization, and cache debugging.
Migrates code, prompts, and API calls from Claude Sonnet 4.0/4.5 or Opus 4.1 to Opus 4.5, updating model strings on Anthropic, AWS, GCP, Azure platforms.
Analyzes BMad project state from catalog CSV, configs, artifacts, and query to recommend next skills or answer questions. Useful for help requests, 'what next', or starting BMad.
Structured contract analysis framework for extracting key terms, scoring risk, triaging NDAs, and identifying compliance exposure. Provides repeatable, evidence-based contract review — not legal advice.
Disclaimer: This skill provides structured analysis patterns and checklists. All output should be reviewed by qualified legal counsel before making binding decisions.
Every contract review must extract and evaluate these 10 elements:
| # | Element | What to Look For | Risk Level if Missing |
|---|---|---|---|
| 1 | Parties | Legal entity names, jurisdiction of incorporation, authorized signatories | High — wrong entity = unenforceable |
| 2 | Term & Renewal | Start date, end date, auto-renewal clauses, notice periods for termination | Medium — auto-renewal traps |
| 3 | Termination Rights | For cause, for convenience, cure periods, termination triggers | High — inability to exit |
| 4 | Liability Cap | Aggregate cap, per-incident cap, carve-outs from cap | Critical — unlimited exposure |
| 5 | Indemnification | Mutual vs. one-sided, scope of indemnified claims, defense obligations | High — asymmetric risk |
| 6 | IP & Ownership | IP assignment, license grants, work-for-hire provisions, background IP protections | Critical — loss of core IP |
| 7 | Confidentiality | Scope, duration, permitted disclosures, return/destruction obligations | Medium — over-broad scope |
| 8 | Governing Law & Disputes | Jurisdiction, arbitration vs. litigation, venue, class action waiver | Medium — unfavorable venue |
| 9 | Data & Privacy | Data processing terms, DPA requirements, breach notification, data residency | High — regulatory exposure |
| 10 | Force Majeure | Defined events, notice requirements, performance relief, termination rights | Low — unless critical supply chain |
Use this structure to summarize any contract:
## Contract Summary
**Contract Type:** [Vendor/Customer/NDA/Partnership/Employment/License]
**Parties:** [Party A] ↔ [Party B]
**Effective Date:** [YYYY-MM-DD]
**Term:** [Duration] | **Auto-Renewal:** [Yes/No — notice period]
**Governing Law:** [Jurisdiction]
### Key Commercial Terms
| Term | Value | Notes |
|------|-------|-------|
| Contract Value | $ | Annual/total |
| Payment Terms | Net [X] days | |
| Liability Cap | $ or [X]x fees | Carve-outs: [list] |
| Termination Notice | [X] days | For convenience / for cause |
### Risk Summary
| Risk Area | Score (1-5) | Key Finding |
|-----------|-------------|-------------|
| Financial Exposure | | |
| IP Risk | | |
| Compliance Risk | | |
| Operational Risk | | |
| **Overall Risk** | **[avg]** | **[summary]** |
Rapid classification for NDAs — takes 10-15 minutes per NDA:
| Dimension | Green (Low Risk) | Yellow (Review) | Red (Escalate) |
|---|---|---|---|
| Type | Mutual | Unilateral (we disclose) | Unilateral (we receive only) |
| Scope | Clearly defined to project | Broad but reasonable | "All information" without limits |
| Duration | 1-3 years | 3-5 years | Perpetual or >5 years |
| Non-compete | None | Narrow (specific market, <1 year) | Broad market, >1 year |
| Residuals | Residuals clause included | Silent on residuals | Explicitly excludes residuals |
| Remedies | Mutual remedies | Injunctive relief (standard) | Liquidated damages or penalties |
Triage Decision:
Weighted scoring across regulatory dimensions:
| Dimension | Weight | Score (0-10) | Weighted |
|---|---|---|---|
| Data Privacy (GDPR, CCPA, PDPA) | 25% | ||
| Export Controls (ITAR, EAR) | 15% | ||
| Anti-Bribery (FCPA, UK Bribery Act) | 15% | ||
| Sanctions (OFAC, EU sanctions) | 15% | ||
| Industry-Specific (HIPAA, PCI-DSS, SOX) | 20% | ||
| Employment Law (non-compete, IP assignment) | 10% | ||
| Total | 100% | /100 |
Risk Bands:
These patterns require immediate escalation:
| # | Red Flag | Why It Matters |
|---|---|---|
| 1 | Unlimited liability | No cap on financial exposure |
| 2 | One-sided indemnification | Only your company bears risk |
| 3 | Auto-renewal without notice | Locked into unfavorable terms |
| 4 | Broad IP assignment | Transfers IP beyond project scope |
| 5 | Non-compete overreach | Restricts future business operations |
| 6 | Unilateral amendment rights | Counterparty can change terms without consent |
| 7 | No termination for convenience | Cannot exit without cause |
| 8 | Jurisdiction in counterparty's home country | Litigation disadvantage |
If any red flag is present, do not approve without legal counsel review.
stakeholder-map — for identifying contract stakeholders and approval workflows