Token导航 LogoToken导航

Agent Skill · 运维

legal-memo-writer(法律备忘录撰写者)

legal-memo-writer 用于补充运维相关能力,适合在 OpenClaw 中需要让 Agent 承接运维相关任务时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态,以及是否会触发联网、命令执行或文件读写。

legal-memo-writer 是运维类 Agent Skill,可用宿主为 OpenClaw,通过ClawHub获取,权限为权限未标注;许可证为 MIT-0,第三方扫描已通过,按安装量在运维类的 954 个 Skill 里排第 673。

总安装 3,819周安装 153GitHub Stars 公开资料未说明下载 1,236核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
MIT-0
版本
1.0.0

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:legal-memo-writer(法律备忘录撰写者)
来源仓库:https://github.com/jimmy974/legal-memo-writer
安装命令:
openclaw skills install legal-memo-writer
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 OpenClaw 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

ClawHubOpenClaw
openclaw skills install legal-memo-writer

这个 Skill 是做什么的

运维类 Skill 处理部署、监控、日志和云资源,多数需要较高的执行权限。

撰写符合法律行业标准的正式备忘录,含引文与分析结构。适用于 OpenClaw 中运维类任务中的文档生成需求。通过 clawhub 安装,输出 Markdown 格式便于审阅。使用前需确保事实陈述准确,避免引用过时法条。维护状态不明,模板未标注版本与更新日期。

legal-memo-writer 属于运维类 Skill,可作为该场景下的辅助能力补充。

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 OpenClaw;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 openclaw skills install legal-memo-writer;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    权限没有明确标注,第一次使用时只给一个无关紧要的任务,观察它到底读了哪些文件和网络。

常见问题

6 条

legal-memo-writer 怎么安装?

在终端执行 openclaw skills install legal-memo-writer。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

legal-memo-writer 支持哪些 AI 工具?

公开资料标注支持 OpenClaw。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

legal-memo-writer 需要什么权限?

权限级别没有明确标注。第一次使用时建议只给无关紧要的任务,观察它实际读写了哪些内容。

legal-memo-writer 是免费的吗?

来源标注的许可证是 MIT-0。本站不代收任何费用,也不托管安装包;能否商用、要不要署名,以许可证原文为准。

legal-memo-writer 用的人多吗?

公开数据是累计安装 3,819 次,近一周安装 153 次,下载 1,236 次。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

legal-memo-writer 安全吗?

第三方扫描结果为通过,但这只覆盖已知的静态检查项,不能替代自己读一遍源码和安装命令。

值得选的地方和要先想清楚的地方

值得选的地方

  • 专注 OpenClaw 一种宿主,触发方式和使用习惯不用来回切换。
  • 许可证明确为 MIT-0,商用和分发边界好判断。
  • 第三方扫描已通过,常见的高风险行为没有命中。

先想清楚的地方

  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 OpenClaw,想直接扩展它能力的人。
  • 需要处理运维类任务、又不想每次都手写提示词的人。
  • 需要许可证清楚、并且有第三方扫描结果的团队项目。

不太适合

  • 需要厂商级技术支持和 SLA 的生产系统。

运维类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
docker-essentials

Docker 基础 · OpenClaw

1,005,15130接触敏感数据MIT-0通过
playwright-scraper-skill

Playwright scraper 技能 · OpenClaw

923,55754接触敏感数据MIT-0有提醒
moltguard

moltguard 搜索 · OpenClaw

825,096110接触敏感数据MIT-0通过
finance-news

财经新闻 · OpenClaw

275,51210需要联网MIT-0有提醒
security-monitor

安全监视器 · OpenClaw

224,1695需要联网MIT-0有提醒
legal-memo-writer

法律备忘录撰写者 · 本页

3,819—权限未标注MIT-0通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

name
legal-memo-writer
description
Write formal legal memos with proper structure, citations, legal analysis, and professional tone. Use when drafting legal memoranda, case analysis, statutory interpretation, regulatory summaries, or any structured legal document requiring IRAC or CREAC format. Supports US federal, UK, and EU/GDPR jurisdictions with Bluebook and OSCOLA citation standards.
license
MIT
metadata
version
2.0.0
domain
legal
triggers
legal memo, legal memorandum, IRAC, CREAC, case law, statute, regulation, legal analysis, brief, legal opinion, contract law, tort, compliance memo, NDA, SLA, GDPR, HIPAA, SOC2, CCPA, Bluebook, OSCOLA, jurisdiction template
role
writer
scope
document
output-format
markdown
related-skills
contract-analyzer, audit-checklist-creator, policy-document-writer

Legal Memo Writer

Drafts professional legal memoranda following standard legal writing conventions (IRAC/CREAC) across US federal, UK, and EU/GDPR jurisdictions with correct citation standards.

When to Use This Skill

  • Drafting internal legal memos analyzing a legal question
  • Summarizing case law or statutory requirements
  • Analyzing regulatory compliance obligations
  • Writing legal opinions on contracts, liability, or IP
  • Structuring legal arguments for review by attorneys
  • Creating client-facing legal summaries
  • Drafting NDA, SLA, IP assignment, and GDPR clause blocks
  • Compliance gap analysis (SOC2, HIPAA, GDPR, CCPA)

Quick Start

"""
Legal Memo Writer — Quick Start
Generates a fully-structured IRAC legal memo in markdown.
Requires: Python 3.8+ stdlib only.
"""

import textwrap
from datetime import date

def build_memo(
    to: str,
    from_: str,
    re: str,
    question: str,
    brief_answer: str,
    facts: str,
    irac_blocks: list[dict],
    conclusion: str,
    jurisdiction: str = "US Federal",
) -> str:
    """
    Build a formatted legal memo string.

    irac_blocks: list of dicts with keys:
        issue, rule, application, conclusion
    """
    divider = "─" * 50

    discussion_parts = []
    for i, block in enumerate(irac_blocks, 1):
        section = textwrap.dedent(f"""
### Issue {i}: {block['issue']}

**Rule:** {block['rule']}

**Application:** {block['application']}

**Sub-Conclusion:** {block['conclusion']}
""").strip()
        discussion_parts.append(section)

    discussion = "\
\
".join(discussion_parts)

    memo = textwrap.dedent(f"""
TO:     {to}
FROM:   {from_}
DATE:   {date.today().isoformat()}
RE:     {re}
JURISDICTION: {jurisdiction}

{divider}
QUESTION PRESENTED
{divider}
{question}

{divider}
BRIEF ANSWER
{divider}
{brief_answer}

{divider}
STATEMENT OF FACTS
{divider}
{facts}

{divider}
DISCUSSION
{divider}
{discussion}

{divider}
CONCLUSION
{divider}
{conclusion}

---
*This memo is for informational purposes and does not constitute legal advice.
All citations must be independently verified.*
""").strip()
    return memo


# Example usage
if __name__ == "__main__":
    memo = build_memo(
        to="Legal Team",
        from_="AI Legal Assistant",
        re="GDPR lawful basis for employee monitoring",
        question="Does continuous keystroke logging of remote employees constitute lawful processing under GDPR Article 6?",
        brief_answer="Likely no. Keystroke logging is disproportionate to legitimate interest under Art. 6(1)(f) and conflicts with employee rights under Art. 88. Explicit consent (Art. 6(1)(a)) may be invalid in an employment context due to power imbalance.",
        facts="Acme Corp proposes 24/7 keystroke logging of all remote EU-based employees. No existing consent mechanism. Employees are subject to termination risk.",
        irac_blocks=[
            {
                "issue": "Whether keystroke logging is proportionate under Art. 6(1)(f)",
                "rule": "GDPR Art. 6(1)(f) requires processing to be necessary for legitimate interests and not overridden by data subject rights. WP29 Opinion 2/2017 on data processing at work applies.",
                "application": "Continuous keystroke capture is broader than 'necessary' — periodic screenshots or output measurement achieve the same monitoring objective with less intrusion. WP29 Opinion 2/2017 at pp. 6-9 cautions against disproportionate employee surveillance.",
                "conclusion": "Art. 6(1)(f) does not support continuous keystroke logging without a narrowly-tailored necessity showing.",
            }
        ],
        conclusion="Advise against deployment without a DPIA (Art. 35), consultation with works council if applicable, and switch to less-intrusive monitoring. Seek explicit DPA guidance if proceeding.",
        jurisdiction="EU/GDPR",
    )
    print(memo)

Standard Memo Structure

TO:     [Recipient Name / Title]
FROM:   [Author Name / Title]
DATE:   [Date]
RE:     [Subject — state the precise legal question]

─────────────────────────────────────────
QUESTION PRESENTED
─────────────────────────────────────────
[One-sentence statement of the legal question.]

─────────────────────────────────────────
BRIEF ANSWER
─────────────────────────────────────────
[2-4 sentences. State the conclusion directly. No hedging.]

─────────────────────────────────────────
STATEMENT OF FACTS
─────────────────────────────────────────
[Objective narrative of legally relevant facts. No argument.]

─────────────────────────────────────────
DISCUSSION
─────────────────────────────────────────
[IRAC or CREAC analysis. See below.]

─────────────────────────────────────────
CONCLUSION
─────────────────────────────────────────
[Restate answer; note caveats; recommend next steps.]

IRAC Format (Discussion Section)

  • Issue — Precise sub-issue being analyzed
  • Rule — Applicable statute, regulation, or case law (cite fully)
  • Application — Apply rule to facts; address counterarguments
  • Conclusion — Sub-issue conclusion

Repeat IRAC for each sub-issue.

CREAC Format (Alternative — Preferred for US Court Briefs)

  • Conclusion — State your conclusion up front (inverted from IRAC)
  • Rule — Applicable legal standard
  • Explanation — Elaborate the rule with supporting authority
  • Application — Apply rule + explanation to client facts
  • Conclusion — Restate conclusion with emphasis

Use CREAC when the audience already knows the question; use IRAC when building up to a conclusion for a skeptical reader.


Multi-Jurisdiction Templates

US Federal Memo

TO:     [Recipient]
FROM:   [Author]
DATE:   [Date]
RE:     [Legal question — cite circuit if relevant]

GOVERNING LAW: [Statute/Reg, e.g., 42 U.S.C. § 1983; 9th Cir. precedent]

QUESTION PRESENTED
Whether [party] is liable under [statute] when [key facts].

BRIEF ANSWER
[Yes/No/Likely.] Under [statute], [element satisfied/not] because [one-line reason].
[Circuit split note if applicable.]

STATEMENT OF FACTS
[Objective facts. Cite record where applicable.]

DISCUSSION

I. [ISSUE HEADING IN ALL CAPS — e.g., THE DEFENDANT IS ENTITLED TO QUALIFIED IMMUNITY]

   A. Legal Standard
      [State the applicable test, e.g., two-part Saucier test.]

   B. Application
      [Apply each prong to facts.]

   C. Counterargument
      [Address strongest opposing argument; distinguish cases.]

CONCLUSION
[Recommendation. Flag circuit split or cert risk if relevant.]

US Citation format (Bluebook):

SourceFormat
Federal case*Smith v. Jones*, 123 F.3d 456, 460 (9th Cir. 2001)
Statute42 U.S.C. § 1983 (2018)
CFR regulation29 C.F.R. § 825.100 (2023)
Federal Register88 Fed. Reg. 12,345 (Feb. 28, 2023)
Secondary (law review)Jane Doe, *Title of Article*, 45 Harv. L. Rev. 123, 130 (2022)
RestatementRestatement (Second) of Torts § 402A (1965)

UK Memo (OSCOLA Format)

MEMORANDUM

To:      [Recipient]
From:    [Author]
Date:    [Date]
Subject: [Legal question]

Governing Law: [UK Act/Statutory Instrument/Case]

1. QUESTION
   [State the legal question.]

2. SUMMARY
   [Brief answer in 2-4 sentences.]

3. FACTS
   [Objective facts.]

4. ANALYSIS

   4.1 [Issue]
       Rule: [Statute or case in OSCOLA format]
       Application: [Apply to facts]
       Conclusion: [Sub-conclusion]

5. CONCLUSION
   [Overall recommendation.]

UK Citation format (OSCOLA):

SourceFormat
Case (neutral citation)*R v Jones* [2006] UKHL 16
Case (law report)*Donoghue v Stevenson* [1932] AC 562 (HL)
UK ActCompanies Act 2006, s 172
Statutory InstrumentCivil Procedure Rules 1998, SI 1998/3132, r 3.4
EU Retained RegulationUK GDPR art 6
SecondaryAndrew Burrows, *A Restatement of the English Law of Contract* (OUP 2016) 45

*Note: No full-stop after citations; commas separate pinpoints from reporter.*

EU/GDPR Memo

LEGAL MEMORANDUM — EU/GDPR

To:           [DPO / Legal Counsel]
From:         [Author]
Date:         [Date]
Subject:      [GDPR compliance question]
Jurisdiction: EU — Regulation (EU) 2016/679 (GDPR)

1. QUESTION PRESENTED
   [Specific GDPR compliance question.]

2. BRIEF ANSWER
   [Yes/No/Likely. Cite key Article.]

3. FACTS
   [Processing activity, data types, data subjects, purposes.]

4. ANALYSIS

   4.1 Lawful Basis (Art. 6)
       [Identify candidate basis; apply necessity/proportionality test.]

   4.2 Special Category Data (Art. 9)
       [If applicable: identify Art. 9(2) exception.]

   4.3 Data Subject Rights Implications (Arts. 12-22)
       [Right to erasure, portability, objection as applicable.]

   4.4 DPIA Requirement (Art. 35)
       [Trigger analysis: systematic monitoring / large scale / sensitive data.]

5. CONCLUSION AND RECOMMENDATIONS
   [Lawful/Unlawful determination. Remediation steps. DPIA if needed.]

EU Citation format:

SourceFormat
GDPR ArticleGDPR art 6(1)(f)
RecitalGDPR recital 47
WP29/EDPB OpinionArticle 29 WP, Opinion 06/2014 on Notion of Legitimate Interests (WP217)
CJEU Case*Data Protection Commissioner v Facebook Ireland*, Case C-311/18, ECLI:EU:C:2020:559
National DPA GuidanceICO, *Guide to the UK GDPR* (2021) s 3.2

Citation Standards

Bluebook Quick Reference (US)

"""
Bluebook citation formatter helpers (US legal memos).
"""

def format_case_us(plaintiff: str, defendant: str, volume: int,
                    reporter: str, page: int, pinpoint: int | None,
                    court: str, year: int) -> str:
    """Format a US case citation per Bluebook Rule 10."""
    pin = f", {pinpoint}" if pinpoint else ""
    return f"*{plaintiff} v. {defendant}*, {volume} {reporter} {page}{pin} ({court} {year})"


def format_statute_us(title: int, section: str, year: int | None = None) -> str:
    """Format a USC citation per Bluebook Rule 12."""
    yr = f" ({year})" if year else ""
    return f"{title} U.S.C. § {section}{yr}"


def format_cfr(title: int, section: str, year: int | None = None) -> str:
    """Format a CFR citation per Bluebook Rule 14."""
    yr = f" ({year})" if year else ""
    return f"{title} C.F.R. § {section}{yr}"


# Examples
if __name__ == "__main__":
    print(format_case_us("Smith", "Jones", 123, "F.3d", 456, 460, "9th Cir.", 2001))
    # → *Smith v. Jones*, 123 F.3d 456, 460 (9th Cir. 2001)
    print(format_statute_us(42, "1983", 2018))
    # → 42 U.S.C. § 1983 (2018)
    print(format_cfr(29, "825.100", 2023))
    # → 29 C.F.R. § 825.100 (2023)

OSCOLA Quick Reference (UK)

  • Cases: *Parties* [Year] Report Page (Court) — no full-stop after.
  • Statutes: Act Year, s Section — comma before section only when needed for clarity.
  • No underlining; italicize case names only.
  • Pinpoints use comma + page: *Jones v Smith* [2010] EWCA Civ 100, [45].

Contract Clause Library

Ready-to-insert clause blocks. Replace [BRACKETED] fields before use.

NDA — Mutual Confidentiality

MUTUAL NON-DISCLOSURE AGREEMENT CLAUSE

1. Definition of Confidential Information. "Confidential Information" means any
   non-public information disclosed by either Party ("Disclosing Party") to the
   other ("Receiving Party") in connection with [PURPOSE], whether in written,
   oral, electronic, or other form, that is designated as confidential or that
   reasonably should be understood to be confidential given the nature of the
   information and circumstances of disclosure.

2. Obligations. Each Receiving Party shall: (a) hold Confidential Information
   in strict confidence using at least the same degree of care used to protect
   its own confidential information, but no less than reasonable care; (b) not
   disclose Confidential Information to third parties without prior written
   consent; and (c) use Confidential Information solely for [PURPOSE].

3. Exclusions. Obligations do not apply to information that: (a) is or becomes
   publicly known through no breach; (b) was rightfully known before disclosure;
   (c) is received from a third party without restriction; or (d) is independently
   developed without use of Confidential Information.

4. Term. Obligations survive for [X] years following termination of this Agreement
   or until the information no longer qualifies as confidential, whichever occurs first.

5. Governing Law. This clause is governed by the laws of [JURISDICTION].

SLA — Service Level Agreement Core Clause

SERVICE LEVELS

1. Availability. Provider shall make the Service available [99.9]% of the time
   in any calendar month ("Uptime Commitment"), excluding Scheduled Maintenance
   and Force Majeure Events.

2. Measurement. Availability is calculated as:
   (Total Minutes − Downtime Minutes) / Total Minutes × 100.
   "Downtime" means the Service is unavailable for more than [5] consecutive
   minutes as measured by Provider's monitoring system.

3. Service Credits. If availability falls below the Uptime Commitment in any
   calendar month, Customer is eligible for the following credits:
   | Availability | Credit (% of monthly fee) |
   |--------------|--------------------------|
   | 99.0–99.9%   | 10%                      |
   | 95.0–99.0%   | 25%                      |
   | < 95.0%      | 50%                      |

4. Credit Procedure. Customer must request credits within [30] days of the
   end of the affected month. Credits are the sole remedy for availability failures.

5. Scheduled Maintenance. Provider will give [48] hours' notice for maintenance
   windows. Scheduled Maintenance does not count as Downtime.

IP Assignment Clause

INTELLECTUAL PROPERTY ASSIGNMENT

1. Assignment. Employee/Contractor hereby irrevocably assigns to [COMPANY] all
   right, title, and interest in and to any Work Product, including all patent,
   copyright, trade secret, and other intellectual property rights therein, to
   the maximum extent permitted by applicable law.

2. Work Product. "Work Product" means all inventions, discoveries, improvements,
   developments, software, writings, designs, and other works created, conceived,
   or reduced to practice by Employee/Contractor: (a) during the term of
   engagement; (b) using Company resources; or (c) relating to Company's actual
   or reasonably anticipated business, research, or development.

3. Moral Rights Waiver. To the extent permitted by law, Employee/Contractor
   waives all moral rights in Work Product and consents to any modification,
   adaptation, or exploitation by Company without attribution.

4. Prior Inventions. Schedule A lists all inventions made prior to this Agreement
   that Employee/Contractor wishes to exclude. Absent Schedule A, no exclusions apply.

5. Assistance. Employee/Contractor will execute all documents and take all actions
   reasonably requested to perfect Company's rights under this clause.

Liability Limitation Clause

LIMITATION OF LIABILITY

1. Exclusion of Consequential Damages. NEITHER PARTY WILL BE LIABLE TO THE
   OTHER FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL
   DAMAGES, OR DAMAGES FOR LOSS OF PROFITS, REVENUE, GOODWILL, OR ANTICIPATED
   SAVINGS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

2. Cap on Liability. EACH PARTY'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF
   OR RELATED TO THIS AGREEMENT, WHETHER IN CONTRACT, TORT, OR OTHERWISE, WILL
   NOT EXCEED THE GREATER OF: (A) [USD $X,XXX] OR (B) THE AMOUNTS PAID BY
   CUSTOMER TO PROVIDER IN THE [12] MONTHS PRECEDING THE CLAIM.

3. Essential Basis. THE PARTIES ACKNOWLEDGE THAT THE LIMITATIONS IN THIS SECTION
   REFLECT A REASONABLE ALLOCATION OF RISK AND ARE AN ESSENTIAL ELEMENT OF THE
   BASIS OF THE BARGAIN BETWEEN THE PARTIES.

4. Exceptions. The limitations above do not apply to: (a) death or personal
   injury caused by negligence; (b) fraud or fraudulent misrepresentation;
   (c) breaches of confidentiality; or (d) indemnification obligations.

GDPR Data Processing Agreement (DPA) Core Clause

DATA PROCESSING AGREEMENT — CORE CLAUSE (Art. 28 GDPR)

1. Processor Obligations. Processor shall process Personal Data only on
   documented instructions of Controller, including with regard to transfers
   of Personal Data to a third country (GDPR Art. 28(3)(a)).

2. Confidentiality. Processor shall ensure that persons authorised to process
   Personal Data have committed themselves to confidentiality or are under an
   appropriate statutory obligation of confidentiality (Art. 28(3)(b)).

3. Security. Processor shall implement measures per Art. 32, including as
   appropriate: (a) pseudonymisation and encryption; (b) ongoing confidentiality,
   integrity, availability assurance; (c) restore capability; (d) regular testing
   and evaluation of security measures.

4. Sub-processors. Processor shall not engage a sub-processor without prior
   specific or general written authorisation of Controller. General authorisation
   requires Processor to notify Controller of intended changes and allow Controller
   [30] days to object. Sub-processors must be bound by equivalent obligations.

5. Data Subject Rights. Processor shall assist Controller to fulfil data subject
   rights requests (Arts. 12–22) within [5] business days of receiving a request.

6. Deletion/Return. Upon termination, Processor shall, at Controller's choice,
   delete or return all Personal Data and delete existing copies unless EU/Member
   State law requires storage.

7. Audit Rights. Processor shall make available to Controller all information
   necessary to demonstrate compliance and allow for and contribute to audits
   and inspections conducted by Controller or an authorised auditor.

8. Governing Law. This DPA is governed by [JURISDICTION] law. Supervisory authority:
   [DPA NAME, e.g., ICO for UK, CNIL for France].

Legal Analysis Patterns

Statutory Interpretation Canons

When a statute's meaning is disputed, apply these canons in order:

  1. Plain Meaning — If text is unambiguous, apply it as written. *Chevron U.S.A. v. NRDC*, 467 U.S. 837 (1984); *Bostock v. Clayton County*, 590 U.S. 644 (2020).
  2. Whole-Act Rule — Read provisions in context of the whole statute; avoid surplusage.
  3. Specific over General (*Generalia specialibus non derogant*) — Specific provision controls over a general one.
  4. Ejusdem Generis — When a general term follows specific terms, the general term is limited to the same class.
  5. Expressio Unius — Expression of one excludes others.
  6. Legislative History — Use only after exhausting textual tools; consult committee reports, floor statements (US); Hansard (UK, *Pepper v Hart* [1993] AC 593).
  7. Remedial Construction — Remedial statutes construed broadly to effectuate purpose.
  8. Avoidance Canon — Construe to avoid constitutional doubt when possible.

Case Synthesis Method

When multiple cases govern an issue:

1. List all directly-on-point cases chronologically.
2. Extract the KEY FACT that determined the outcome in each.
3. Identify the governing RULE stated by the court.
4. Note any DISTINCTIONS between cases (factual, doctrinal, procedural).
5. Build a matrix:
   | Case | Key Fact | Outcome | Distinguishing Feature |
6. Apply: map client facts to the case whose key facts are most analogous.
7. Address the best counter-case explicitly — distinguish it or concede the risk.

Compliance Memo Templates

SOC2 Gap Analysis Memo

COMPLIANCE MEMORANDUM — SOC2 TYPE II GAP ANALYSIS

To:     CISO / Audit Committee
From:   [Author]
Date:   [Date]
Re:     SOC2 Type II Readiness — [System/Service Name]

EXECUTIVE SUMMARY
[2-3 sentences: overall readiness rating, critical gaps, timeline to remediation.]

SCOPE
Trust Service Criteria: [Security | Availability | Confidentiality | Processing
Integrity | Privacy — select applicable]
Audit Period: [12 months ending DATE]
In-scope systems: [List]

GAP ANALYSIS

| TSC Criterion | Control Description | Status | Gap / Risk | Priority |
|---------------|---------------------|--------|------------|----------|
| CC6.1         | Logical access controls | Partial | MFA not enforced for VPN | High |
| CC7.2         | System monitoring | Pass | — | — |
| A1.1          | Availability capacity mgmt | Fail | No capacity forecast process | Critical |

REMEDIATION ROADMAP
[Table: Gap → Owner → Target Date → Evidence Required]

CONCLUSION
[Recommend proceed / delay audit / engage readiness consultant.]

HIPAA Compliance Memo

COMPLIANCE MEMORANDUM — HIPAA SECURITY RULE ANALYSIS

To:     Privacy Officer / Legal Counsel
From:   [Author]
Date:   [Date]
Re:     HIPAA Security Rule compliance — [System/Vendor]

REGULATORY FRAMEWORK
45 C.F.R. §§ 164.302–164.318 (Security Rule)
45 C.F.R. §§ 164.500–164.534 (Privacy Rule)
Applicable to: Covered Entity / Business Associate [select]

ANALYSIS

Administrative Safeguards (§ 164.308)
[ ] Risk analysis conducted and documented (§ 164.308(a)(1)(ii)(A))
[ ] Workforce training on PHI handling (§ 164.308(a)(5))
[ ] Sanctions policy for workforce violations (§ 164.308(a)(1)(ii)(C))

Physical Safeguards (§ 164.310)
[ ] Facility access controls (§ 164.310(a))
[ ] Workstation use policy (§ 164.310(b))

Technical Safeguards (§ 164.312)
[ ] Unique user IDs (§ 164.312(a)(2)(i))
[ ] Audit controls / logs (§ 164.312(b))
[ ] Transmission encryption (§ 164.312(e)(1))

BAA STATUS
Business Associate Agreement in place: [Yes / No / Pending]
BAA must include 45 C.F.R. § 164.504(e) provisions.

GAPS AND RECOMMENDATIONS
[Table: Requirement → Current State → Gap → Remediation → Owner]

CONCLUSION
[Compliant / Non-compliant / Partial. Estimated breach risk if unaddressed.]

GDPR Compliance Memo

COMPLIANCE MEMORANDUM — GDPR PROCESSING ACTIVITY REVIEW

To:     DPO / Legal Counsel
From:   [Author]
Date:   [Date]
Re:     GDPR Article 30 Record — [Processing Activity Name]

PROCESSING ACTIVITY DETAILS
Controller: [Entity name, contact]
Purpose: [Specific, explicit purpose — Art. 5(1)(b)]
Legal Basis: Art. 6(1)([a/b/c/d/e/f]) — [explain]
Special Category Basis (if applicable): Art. 9(2)([a-j])
Data Subjects: [Categories, estimated count]
Data Categories: [Types of personal data]
Recipients: [Internal teams, processors, third countries]
Retention Period: [Specific period with justification — Art. 5(1)(e)]
International Transfers: [Art. 46 mechanism: SCCs / Adequacy / BCRs]

RISK ASSESSMENT
DPIA Required (Art. 35)? [Yes / No — justify using EDPB Guidelines 09/2022]
Residual Risks: [List]

COMPLIANCE STATUS
[ ] RoPA entry created (Art. 30)
[ ] Privacy notice updated (Arts. 13/14)
[ ] DPIA completed (if required)
[ ] Data subject rights mechanism in place (Arts. 15-22)
[ ] DPA notified (if high-risk Art. 35(4))

RECOMMENDATION
[Approve / Require modifications / Suspend processing]

CCPA Compliance Memo

COMPLIANCE MEMORANDUM — CCPA/CPRA COMPLIANCE REVIEW

To:     Privacy Counsel / CCO
From:   [Author]
Date:   [Date]
Re:     CCPA/CPRA — [Business Practice / Data Flow]

GOVERNING LAW
Cal. Civ. Code §§ 1798.100–1798.199.100 (CCPA as amended by CPRA)
Cal. Code Regs. tit. 11, §§ 7000–7304 (CPRA Regulations)

THRESHOLD ANALYSIS
Business qualifies as "Business" under § 1798.140(d) if:
[ ] Annual gross revenue > $25M
[ ] Buys/sells/receives/shares PI of ≥ 100,000 consumers or households
[ ] Derives ≥ 50% of revenue from selling/sharing PI

CONSUMER RIGHTS CHECKLIST (§§ 1798.100–1798.125)
[ ] Right to Know (categories + specific pieces)
[ ] Right to Delete (with exceptions)
[ ] Right to Correct (CPRA addition)
[ ] Right to Opt-Out of Sale/Sharing
[ ] Right to Limit Use of Sensitive PI (CPRA)
[ ] Right to Non-Discrimination

REQUIRED NOTICES
[ ] Privacy Policy updated — disclose all categories collected/sold/shared
[ ] "Do Not Sell or Share My Personal Information" link prominent
[ ] Notice at Collection at point of collection

GAPS AND RECOMMENDATIONS
[Table: Requirement → Gap → Owner → Deadline]

CONCLUSION
[Compliant / Non-compliant. Penalty exposure: up to $7,500/intentional violation (§ 1798.155).]

Core Workflow

  1. Clarify the legal question — Identify jurisdiction, governing law, and specific question
  2. Select template — US Federal / UK / EU/GDPR based on jurisdiction
  3. Identify applicable rules — Statutes, regulations, binding case law, persuasive authority
  4. Apply citation standard — Bluebook (US), OSCOLA (UK), GDPR citation style (EU)
  5. Analyze facts against rules — Use IRAC or CREAC; address both favorable and unfavorable authority
  6. Draft — Follow template structure; use plain professional language
  7. Clause insertion if needed — Pull from Contract Clause Library for transactional work
  8. Review — Confirm citations are plausible (note if AI-generated and require verification)
  9. Output — Return as formatted markdown or plain text

Important Caveats

  • Always include disclaimer: *"This memo is for informational purposes and does not constitute legal advice. All citations must be independently verified."*
  • Never fabricate specific case citations — if unsure, use [citation needed]
  • Flag jurisdictional uncertainty explicitly
  • If the question requires licensed legal advice, note this clearly
  • GDPR memos: always recommend engaging a qualified DPO for final review

Tone and Style

  • Formal, precise, objective in fact section
  • Analytical but direct in discussion
  • Active voice preferred; avoid hedging language in conclusions
  • Short paragraphs; use headers for each IRAC/CREAC section
  • All-caps for conclusion headings in US court-style memos; sentence case for client memos

平台分布

OpenClaw

79.69%
按下载量换算985

安全审计

VirusTotal

通过

ClawScan

通过

Static analysis

通过

权限和风险

权限未标注

当前来源未能明确判断权限范围,默认进入异常复核队列。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。目前只有一个公开来源,建议同时核对源仓库。

继续浏览同类 Skills