skills-core/contract-manager
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
main
contract-manager/references/ai-skills.md
skillfactor-pipeline 315f80a660 feat: contract-manager skill package v0.1.0
2026-08-15 14:56:08 +02:00

38 KiB
Raw Permalink Blame History

External AI agent skills — contract-manager

Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.

Tiers: core = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; adjacent = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package.

Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by pipeline/p5_enrich_ai_skills.py on 2026-07-14.

Source: anthropics/skills

  • Repository: https://github.com/anthropics/skills (commit f6656c1, retrieved 2026-07-14)
  • License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
Skill Tier What it adds Upstream
docx adjacent Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … source
pdf adjacent Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … source

Source: wshobson/agents

Skill Tier What it adds Upstream
gdpr-data-handling core Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews. source
employment-contract-templates core Create employment contracts, offer letters, and HR policy documents following legal best practices. Use when drafting employment agreements, creating HR policies, or standardizing employment documentation. source

Source: a5c-ai/babysitter

Skill Tier What it adds Upstream
policy-management core Manage corporate policy lifecycle from drafting through compliance source
hardhat-framework core Expert usage of Hardhat for smart contract development, testing, and deployment. Includes TypeChain generation, plugin ecosystem, network forking, and deployment management. source
contract-analyzer core Contract analysis and negotiation support skill with clause extraction and risk identification source
gdpr-compliance-automator core GDPR compliance assessment and automation for data mapping, consent management, DSAR handling, and privacy impact assessments source
translation-management core Integration with translation management systems and i18n workflows. Connect with Crowdin, Transifex, Weblate, manage translation memory, synchronize glossaries, and automate localization pipelines. source
bug-bounty core Bug bounty program management and security disclosure expertise for smart contracts. Covers program setup on Immunefi, vulnerability triage, responsible disclosure coordination, bounty payments, and post-disclosure analysis. source
echidna-fuzzer core Property-based testing and fuzzing using Echidna for smart contracts. Includes invariant definition, corpus management, coverage analysis, and CI/CD integration for comprehensive security testing. source
gdpr-consent-manager core Implement GDPR-compliant consent management for desktop applications source
code-review-patterns core Multi-dimensional code assessment across security, quality, performance, and maintainability with confidence-gated reporting (>=80%) and Router Contract generation. source
evm-analysis core Deep EVM bytecode analysis and decompilation capabilities for smart contract security, gas optimization, and reverse engineering. Provides tools for analyzing opcodes, storage layouts, proxy patterns, and bytecode verification. source
slither-analysis core Expert integration with Slither static analyzer for smart contract vulnerability detection, code quality analysis, and security reporting. Supports all Slither detectors and custom analysis configurations. source
foundry-framework core Expert usage of Foundry (Forge, Cast, Anvil, Chisel) for smart contract development, testing, and deployment. Includes fuzzing, gas reporting, local development, and deployment scripting capabilities. source

Source: aaron-he-zhu/aaron-marketing-skills

Skill Tier What it adds Upstream
memory-management core Use when the user asks to "remember project context", review saved findings, initialize runtime memory, archive stale work, reconcile notes, or erase a subject; manages authorized HOT/WARM/COLD working memory across all disciplines while … source

Source: affaan-m/everything-claude-code

Skill Tier What it adds Upstream
enterprise-agent-ops core Operate long-lived agent workloads with observability, security boundaries, and lifecycle management. source
agentic-os core Build persistent multi-agent operating systems on Claude Code. Covers kernel architecture, specialist agents, slash commands, file-based memory, scheduled automation, and state management without external databases. source

Source: AIScientists-Dev/Flowtrace

Skill Tier What it adds Upstream
make-trace core Turn any source that describes how a kind of task gets done (a SKILL.md, a chat log, a runbook, plain prose) into a runnable Morph trace. Lift it into a DAG, write a contract per step, place inputs, and drive the full run lifecycle to … source

Source: alirezarezvani/claude-skills

Skill Tier What it adds Upstream
iso42001-specialist core ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and … source
ciso-advisor core Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when … source
compliance-readiness core /cs:compliance-readiness — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification … source
ma-playbook core M&A strategy for acquiring companies or being acquired. Due diligence, valuation, integration, and deal structure. Use when evaluating acquisitions, preparing for acquisition, M&A due diligence, integration planning, or deal negotiation. source

Source: avelikiy/great_cto

Skill Tier What it adds Upstream
done-blocked core Reusable reporting contract for any agent that hands work back to the pipeline. Forces ONE of two terminal statuses (DONE or BLOCKED) with a specific evidence shape. Stops vague "probably finished" and "kind of stuck" verdicts. source

Source: basicmachines-co/basic-memory

Skill Tier What it adds Upstream
memory-schema core Schema lifecycle management for Basic Memory: discover unschemaed notes, infer schemas, create and edit schema definitions, validate notes, and detect drift. Use when working with structured note types (Task, Person, Meeting, etc.) to … source
memory-tasks core Task management via Basic Memory schemas: create, track, and resume structured tasks that survive context compaction. Uses BM's schema system for uniform notes queryable through the knowledge graph. source

Source: brycewang-stanford/Auto-Empirical-Research-Skills

Skill Tier What it adds Upstream
hud core Diverga HUD (Heads-Up Display) management skill. Configure and manage the research project statusline display. Supports multiple presets: research, checkpoint, memory, minimal. Triggers: "hud", "statusline", "display settings source
law-skills core 9 legal research skills. Trigger: legal research, case law analysis, regulatory compliance. Design: legal databases, citation networks, and judicial analytics tools. source
legal-research-guide core Legal research methods, case law analysis, and compliance tools source

Source: davepoon/buildwithclaude

Skill Tier What it adds Upstream
gsd:ai-integration-phase core Generate AI design contract (AI-SPEC.md) for phases that involve building AI systems — framework selection, implementation guidance from official docs, and evaluation strategy source

Source: davila7/claude-code-templates

Skill Tier What it adds Upstream
microservices-patterns core Master microservices architecture patterns including service boundaries, inter-service communication, data management, and resilience patterns for building distributed systems. source
agent-memory-mcp core A hybrid memory system that provides persistent, searchable knowledge management for AI agents (Architecture, Patterns, Decisions). source
security-compliance core Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security … source
lint-and-validate core Automatic quality control, linting, and static analysis procedures. Use after every code modification to ensure syntax correctness and project standards. Triggers onKeywords: lint, format, check, validate, types, static analysis. source

Source: foryourhealth111-pixel/Vibe-Skills

Skill Tier What it adds Upstream
speckit-constitution core Create or update project governing principles and development guidelines. Use at project start to establish code quality, testing standards, and architectural constraints that guide all development. source
peer-review core Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … source

Source: jeremylongshore/claude-code-plugins-plus-skills

Skill Tier What it adds Upstream
abridge-cost-tuning core Optimize Abridge clinical AI costs through tier selection, session management, and usage monitoring for healthcare organizations. Use when analyzing Abridge billing, optimizing encounter volume, or right-sizing your Abridge contract for … source
instantly-data-handling core Implement Instantly.ai lead data management, GDPR/CAN-SPAM compliance, and list operations. Use when handling lead imports, managing block lists, implementing unsubscribe flows, or ensuring compliance with email regulations. Trigger with … source
flexport-data-handling core Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … source
supabase-data-handling core Implement GDPR/CCPA compliance with Supabase: RLS for data isolation, user deletion via auth.admin.deleteUser(), data export via SQL, PII column management, backup/restore workflows, and retention policies. Use when handling sensitive … source
contract-review core Orchestrates a comprehensive multi-agent contract review that analyzes risk, plain-English translation, missing protections, and compliance in parallel. Use when a user shares a contract and wants a full review, safety score, or executive … source
tracking-token-launches core Track new token launches across DEXes with risk analysis and contract verification. Use when discovering new token launches, monitoring IDOs, or analyzing token contracts. Trigger with phrases like "track launches", "find new tokens", "new … source
apollo-data-handling core Apollo.io data management and compliance. Use when handling contact data, implementing GDPR compliance, or managing data exports and retention. Trigger with phrases like "apollo data", "apollo gdpr", "apollo compliance", "apollo data … source
posthog-data-handling core PostHog PII handling, GDPR compliance, consent management, data deletion, property sanitization, and privacy-safe analytics configuration. Trigger: "posthog data", "posthog PII", "posthog GDPR", "posthog data retention", "posthog privacy", … source
risk-analysis core Performs deep clause-by-clause risk scoring across 10 categories with poison pill detection and financial exposure estimation. Use when a user needs to understand the specific risks in a contract before signing. Trigger with … source
twinmind-data-handling core Handle TwinMind meeting data with GDPR compliance: transcript storage, memory vault management, data export, and deletion policies. Use when implementing data handling, or managing TwinMind meeting AI operations. Trigger with phrases like … source
glean-core-workflow-b core Execute Glean secondary workflow: bulk document indexing, custom datasource connectors, and content lifecycle management via the Indexing API. Trigger: "glean bulk index", "glean custom connector", "glean datasource", "glean indexing". source
negotiate core Analyzes contracts for unfavorable or risky clauses and generates prioritized counter-proposals with replacement language. Use when reviewing a contract before signing, preparing for a negotiation, or responding to unfavorable terms. … source

Source: K-Dense-AI/claude-scientific-skills

Skill Tier What it adds Upstream
peer-review core Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … source

Source: K-Dense-AI/scientific-agent-skills

Skill Tier What it adds Upstream
peer-review core Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … source

Source: mohitagw15856/pm-claude-skills

Skill Tier What it adds Upstream
vendor-contract-checklist core Review a vendor/SaaS contract against a practical checklist before you sign. Use when asked to review a vendor contract, check a SaaS/MSA/subscription agreement, flag risky terms, or prepare negotiation points before signing. Produces a … source
compliance-checklist core Generate a prioritised compliance checklist for GDPR, SOC 2, ISO 27001, FCA, HIPAA, or other frameworks with a gap analysis. Use when asked for a compliance checklist, gap analysis, readiness assessment, or audit preparation for any … source

Source: mukul975/Anthropic-Cybersecurity-Skills

Skill Tier What it adds Upstream
implementing-aws-security-hub core This skill covers deploying AWS Security Hub as a centralized cloud security posture management platform that aggregates findings from GuardDuty, Inspector, Macie, and third-party tools. It details enabling security standards like CIS AWS … source
implementing-zero-trust-with-hashicorp-boundary core Implement HashiCorp Boundary for identity-aware zero trust infrastructure access management with dynamic credential brokering, session recording, and Vault integration. source
analyzing-ethereum-smart-contract-vulnerabilities core Perform static and symbolic analysis of Solidity smart contracts using Slither and Mythril to detect reentrancy, integer overflow, access control, and other vulnerability classes before deployment to Ethereum mainnet. source
securing-aws-iam-permissions core This skill guides practitioners through hardening AWS Identity and Access Management configurations to enforce least privilege access across cloud accounts. It covers IAM policy scoping, permission boundaries, Access Analyzer integration, … source
analyzing-macro-malware-in-office-documents core Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … source
auditing-foundry-smart-contract-security core Pre-deployment security audit of Solidity smart contracts in a Foundry project. Combines static analysis (Slither, Aderyn), symbolic execution (Mythril), and property-based testing (forge fuzz + invariant tests with handlers) to catch … source
implementing-iso-27001-information-security-management core ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). This skill covers the complete source
analyzing-outlook-pst-for-email-forensics core Analyze Microsoft Outlook PST and OST files for email forensic evidence including message content, headers, attachments, deleted items, and metadata using libpff, pst-utils, and forensic email analysis tools for legal investigations and … source
achieving-cmmc-level-2-compliance core Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, … source
analyzing-memory-forensics-with-lime-and-volatility core Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux … source
implementing-aws-security-hub-compliance core Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security … source

Source: nWave-ai/nWave

Skill Tier What it adds Upstream
nw-security-and-governance core Database security (encryption, access control, injection prevention), data governance (lineage, quality, MDM), and compliance frameworks (GDPR, CCPA, HIPAA) source

Source: rampstackco/claude-skills

Skill Tier What it adds Upstream
vendor-evaluation core Evaluate, select, and contract with vendors and SaaS tools. Use this skill when comparing alternatives, running an RFP, scoring vendors against criteria, negotiating contracts, planning a switch, or assessing a vendor's risk. Triggers on … source
accessibility-audit core Run a comprehensive WCAG accessibility audit covering perceivable, operable, understandable, and robust principles. Use this skill whenever the user wants to audit accessibility, review WCAG compliance, fix accessibility issues, prepare … source

Source: ruvnet/claude-code-flow

Skill Tier What it adds Upstream
AgentDB Memory Patterns core Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. source
memory-management core AgentDB memory system with HNSW vector search. Provides 150x-12,500x faster pattern retrieval, persistent storage, and semantic search capabilities for learning and knowledge management. Use when: need to store successful patterns, … source

Source: ruvnet/ruflo

Skill Tier What it adds Upstream
AgentDB Memory Patterns core Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. source
memory-management core AgentDB memory system with HNSW vector search. Provides 150x-12,500x faster pattern retrieval, persistent storage, and semantic search capabilities for learning and knowledge management. Use when: need to store successful patterns, … source

Source: samber/cc-skills-golang

Skill Tier What it adds Upstream
golang-dependency-management core Dependency management strategies for Golang projects — go.mod management, installing/upgrading packages, Minimal Version Selection, vulnerability scanning, outdated dependency tracking, binary size analysis, Dependabot/Renovate setup, … source

Source: sboghossian/master-claude-for-legal

Skill Tier What it adds Upstream
master-claude-for-legal core Master skill for legal teams using Claude. Loads the right reference for the user's question (privilege configuration, MCP hardening, MCP connector catalog, practice-area plugins, Microsoft 365 surfaces, managed agents, cold-start … source

Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Tier What it adds Upstream
csrd core Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality assessment, sustainability … source
gdpr-compliance core Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations, (2) drafting GDPR-compliant documents such as privacy policies, Data Processing Agreements (DPAs), and consent notices, … source

Source: vibeeval/vibecosystem

Skill Tier What it adds Upstream
compliance-patterns core GDPR data handling, audit logging, data classification, retention policies, and consent management for regulatory compliance. source
gdpr-compliance core GDPR compliance - data subject rights, lawful basis, DPIA, privacy by design, breach notification, consent management, cross-border transfers, PII masking source
kvkk-compliance core KVKK and GDPR compliance patterns - consent management, right to erasure, breach notification, audit logging, cookie consent, and data classification. source

Source: wondelai/skills

Skill Tier What it adds Upstream
negotiation core Prepare and execute negotiations using tactical empathy, calibrated questions, and the Ackerman method. Use when the user mentions "salary negotiation", "contract terms", "handling objections", "mirroring and labeling", "difficult … source

Source: zebbern/claude-code-guide

Skill Tier What it adds Upstream
regulatory-audit-generator core Builds compliance checklists for business scenarios involving GDPR, PIPL, or advertising/data laws. Outputs a structured checklist with check items, legal basis, risk levels, and actionable recommendations. Triggered by requests like "run … source