nda-review
Deep clause-by-clause NDA review from Recipient or Discloser perspective. Produces issue log with redlines, fallbacks, rationales, owners, deadlines. Use when reviewing NDAs for negotiation or approval.
What this skill does
> **⚠️ EXPERIMENTAL** — This skill is provided for educational and informational purposes only. It does NOT constitute legal advice. All responsibility for usage rests with the user. Consult qualified legal professionals before acting on any output. # NDA Review Deep clause-by-clause NDA review tool that analyzes agreements from Recipient or Discloser perspective. Produces structured issue logs with preferred redlines, fallback positions, rationale, owners, and deadlines. --- ## Table of Contents - [Tools](#tools) - [NDA Clause Reviewer](#nda-clause-reviewer) - [Reference Guides](#reference-guides) - [Workflows](#workflows) - [Full NDA Review](#full-nda-review) - [Perspective-Based Review](#perspective-based-review) - [Immediate Red Flags](#immediate-red-flags) - [Review Checklists](#review-checklists) - [Variation Callouts](#variation-callouts) - [Risk Rating Guide](#risk-rating-guide) - [Common Pitfalls](#common-pitfalls) - [Troubleshooting](#troubleshooting) - [Success Criteria](#success-criteria) - [Scope & Limitations](#scope--limitations) - [Anti-Patterns](#anti-patterns) - [Tool Reference](#tool-reference) --- ## Tools ### NDA Clause Reviewer Performs deep analysis of NDA text, extracting and classifying each clause against best practices. Detects overbroad definitions, missing carveouts, problematic residuals, IP grants, indemnification, and audit rights. ```bash # Review from recipient perspective (default) python scripts/nda_clause_reviewer.py nda_draft.txt # Review from discloser perspective python scripts/nda_clause_reviewer.py nda_draft.txt --perspective discloser # JSON output for integration python scripts/nda_clause_reviewer.py nda_draft.txt --json # Save issue log python scripts/nda_clause_reviewer.py nda_draft.txt --output issues.json --json ``` **What it produces:** - Clause-by-clause issue log with H/M/L risk ratings - Preferred redline for each issue - Fallback position if preferred is rejected - Rationale for each recommendation - Owner assignment (legal, business, executive) - Deadline category (pre-signing, 30-day, 90-day) --- ## Reference Guides ### NDA Clause Reference `references/nda_clause_reference.md` Five deep reference modules: - Duration & Scope (term, survival, scope limitations) - Key Clauses (definition, purpose, permitted use, marking) - Party Obligations (standard of care, use restriction, disclosure limits) - Remedies & Liability (injunctive relief, damages, indemnification) - Standard Exceptions (public knowledge, prior possession, independent development, third-party receipt, legal compulsion) ### NDA Review Templates `references/nda_review_templates.md` Output templates and worked examples: - Executive Summary format - Clause-by-clause Issue Log table format - Ownership and timing defaults by topic category - Worked examples for social media endorsement and group licensing scenarios --- ## Workflows ### Full NDA Review 1. **Triage first** -- Run `nda-triage` skill for quick GREEN/YELLOW/RED classification 2. **Deep review** -- Run `nda_clause_reviewer.py` with appropriate `--perspective` 3. **Review issue log** -- Address HIGH-risk items first, then MEDIUM, then LOW 4. **Prepare redlines** -- Use preferred positions; prepare fallbacks 5. **Assign owners** -- Legal owns clause language; business owns commercial terms 6. **Set deadlines** -- Pre-signing items before next meeting; post-signing items within 30-90 days 7. **Negotiate** -- Present redlines; use fallbacks as needed 8. **Final review** -- Verify all issues resolved before execution ### Perspective-Based Review | Perspective | Focus Areas | Key Concerns | |-------------|-------------|--------------| | Recipient | Scope of obligations, carveouts, residuals, return/destruction | Protecting freedom to operate; avoiding contamination claims | | Discloser | Definition breadth, remedies, duration, permitted disclosures | Maximizing protection; ensuring adequate enforcement | --- ## Immediate Red Flags Stop review and escalate if any of these 7 red flags are present. | # | Red Flag | Why It Matters | Escalation | |---|----------|---------------|------------| | 1 | Non-compete clause | Restricts business operations; requires separate consideration and analysis | Senior counsel immediately | | 2 | IP assignment or license grant | Transfers rights beyond confidentiality scope | Senior counsel immediately | | 3 | Non-solicitation of employees or customers | Employment law implications; may be unenforceable | Senior counsel within 24 hours | | 4 | Missing 3+ standard carveouts | Fundamentally deficient NDA | Counsel review before any response | | 5 | Liquidated damages or penalty clause | Transforms NDA into penalty contract | Senior counsel within 24 hours | | 6 | Perpetual obligations with no termination | Indefinite legal burden with no exit | Counsel review within 48 hours | | 7 | Exclusivity provision | Limits engagement with other parties | Business leadership + counsel | --- ## Review Checklists ### Recipient Checklist (8 Topics) | # | Topic | Key Questions | Risk if Missing | |---|-------|---------------|-----------------| | 1 | Definition Scope | Is confidential info bounded? Is there a marking requirement? | Overbroad definition traps all shared information | | 2 | Standard Carveouts | Are all 5 carveouts present and properly drafted? | Missing carveouts restrict legitimate business activities | | 3 | Permitted Use | Is use restricted to stated purpose? Can we share with advisors? | Overly restrictive use limits may impede evaluation | | 4 | Residuals | Is there a residuals clause? Is it narrow or broad? | Broad residuals clause benefits; narrow or absent protects discloser | | 5 | Return/Destruction | Return or destroy option? Retention exception for backups? | No retention exception is impractical for electronic data | | 6 | Term & Survival | Reasonable term? Reasonable survival period? Termination right? | Perpetual obligations are burdensome | | 7 | Remedies | Injunctive relief only? Or liquidated damages/indemnification? | Excessive remedies shift risk disproportionately | | 8 | Problematic Provisions | Non-compete? Non-solicitation? IP assignment? Audit rights? | These provisions have no place in a standard NDA | ### Discloser Checklist (5 Topics) | # | Topic | Key Questions | Risk if Missing | |---|-------|---------------|-----------------| | 1 | Definition Breadth | Does definition cover all information we will share? All forms? | Gaps in definition leave information unprotected | | 2 | Obligation Strength | Standard of care adequate? Written agreements from recipients? | Weak obligations increase risk of unauthorized disclosure | | 3 | Remedies | Injunctive relief available? Is it meaningful in this jurisdiction? | Without adequate remedies, NDA is unenforceable in practice | | 4 | Duration | Is the term long enough? Does survival cover our exposure window? | Short terms may expire before information loses value | | 5 | Recipient Limits | Who can receive? Is need-to-know enforced? Downstream binding? | Unrestricted sharing exposes information to unauthorized parties | --- ## Variation Callouts Different NDA contexts require different review emphasis. ### M&A Context | Additional Concern | Reason | Recommended Position | |-------------------|--------|---------------------| | Standstill provision | Prevents hostile acquisition moves during due diligence | Accept if mutual and time-limited (12-18 months) | | Non-solicitation of employees | Standard in M&A NDAs | Accept if limited to key employees for 12 months | | Broader definition | M&A requires extensive information sharing | Accept broader definition with strong carveouts | | Longer survival | Sensitive strategic information shared | 3-5 year survival is appropriate | | Residuals clause sensitivity | Competitive intelligence at stake | Resist residuals clause or narrow significantly | ### Employment Context | Additional Concern | Reason | Reco
Related in Code Review
gstack
IncludedFast headless browser for QA testing and site dogfooding. Navigate pages, interact with elements, verify state, diff before/after, take annotated screenshots, test responsive layouts, forms, uploads, dialogs, and capture bug evidence. Use when asked to open or test a site, verify a deployment, dogfood a user flow, or file a bug with screenshots. (gstack)
startup-due-diligence
IncludedLegal due diligence review for seed-stage and Series A startups (US, Delaware C-Corp focus). Supports both investor and founder perspectives. Capabilities include: (1) Interactive document review and issue spotting; (2) Document request list generation; (3) Cap table and SAFE/convertible note analysis; (4) Red flag identification with severity ratings; (5) Diligence report generation. TRIGGERS: due diligence, DD, startup investment, cap table review, Series A, seed round, investor diligence, legal review startup, SAFE analysis, convertible note, 409A, founder vesting.
interview-master
IncludedThis skill should be used when the user asks to "generate interview questions", "prepare for interview", "optimize resume", "conduct mock interview", "analyze git commits for resume", "generate resume from code", "review my resume", or mentions interview preparation, career assistance, or extracting project experience from git history. Provides comprehensive interview and career development guidance for both job seekers and interviewers.
fix-issue
IncludedFixes GitHub issues using parallel analysis agents for root cause investigation, code exploration, and regression detection. Reads issue context from gh CLI, searches codebase and memory for related patterns, generates a fix with tests, and links the resolution back to the issue via PR. Includes prevention analysis to avoid recurrence. Use when debugging errors, resolving regressions, fixing bugs, or triaging issues.
sf-apex
IncludedGenerates and reviews Salesforce Apex code with 150-point scoring. TRIGGER when: user writes, reviews, or fixes Apex classes, triggers, test classes, batch/queueable/schedulable jobs, or touches .cls/.trigger files. DO NOT TRIGGER when: LWC JavaScript (use sf-lwc), Flow XML (use sf-flow), SOQL-only queries (use sf-soql), or non-Salesforce code.
swift-development
IncludedComprehensive Swift development for building, testing, and deploying iOS/macOS applications. Use when Claude needs to: (1) Build Swift packages or Xcode projects from command line, (2) Run tests with XCTest or Swift Testing framework, (3) Manage iOS simulators with simctl, (4) Handle code signing, provisioning profiles, and app distribution, (5) Format or lint Swift code with SwiftFormat/SwiftLint, (6) Work with Swift Package Manager (SPM), (7) Implement Swift 6 concurrency patterns (async/await, actors, Sendable), (8) Create SwiftUI views with MVVM architecture, (9) Set up Core Data or SwiftData persistence, or any other Swift/iOS/macOS development tasks.