legal-response
Generate a response to a common legal inquiry using configured templates, with built-in escalation checks for situations that shouldn't use a templated reply. Use when responding to data subject requests, litigation hold notices, vendor legal questions, NDA requests from business teams, or subpoenas.
- License 许可
- Apache-2.0
- 最近更新
- 2026-11-14
- Stars
- ★ 3.6w
- Forks
- 3.9k
01 前言 Front Matter
- name
- legal-response
- description
- Generate a response to a common legal inquiry using configured templates, with built-in escalation checks for situations that shouldn't use a templated reply. Use when responding to data subject requests, litigation hold notices, vendor legal questions, NDA requests from business teams, or subpoenas.
- argument-hint
- [inquiry-type]
03 SKILL.md 正文
/legal-response -- Generate Response from Templates
If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.
Generate a response to a common legal inquiry using configured templates. Customizes the response with specific details and includes escalation triggers for situations that should not use a templated response.
Important: This command assists with legal workflows but does not provide legal advice. Generated responses should be reviewed by qualified legal professionals before being sent, especially for regulated communications.
Invocation
/legal-response [inquiry-type]
Common inquiry types:
dsrordata-subject-request-- Data subject access/deletion/correction requestsholdordiscovery-hold-- Litigation hold noticesvendororvendor-question-- Vendor legal questionsndaornda-request-- NDA requests from business teamsprivacyorprivacy-inquiry-- Privacy-related questionssubpoena-- Subpoena or legal process responsesinsurance-- Insurance claim notificationscustom-- Use a custom template
If no inquiry type is provided, ask the user what type of response they need and show available categories.
Workflow
Step 1: Identify Inquiry Type
Accept the inquiry type from the user. If the type is ambiguous, show available categories and ask for clarification.
Step 2: Load Template
Look for templates in local settings (e.g., legal.local.md or a templates directory).
If templates are configured:
- Load the appropriate template for the inquiry type
- Identify required variables (recipient name, dates, specific details)
If no templates are configured:
- Inform the user that no templates were found for this inquiry type
- Offer to help create a template (see Template Creation Guide below)
- Provide a reasonable default response structure based on the inquiry type
Step 3: Check Escalation Triggers
Before generating any response, evaluate whether this situation has characteristics that should NOT use a templated response.
Universal Escalation Triggers (Apply to All Categories)
- The matter involves potential litigation or regulatory investigation
- The inquiry is from a regulator, government agency, or law enforcement
- The response could create a binding legal commitment or waiver
- The matter involves potential criminal liability
- Media attention is involved or likely
- The situation is unprecedented (no prior handling by the team)
- Multiple jurisdictions are involved with conflicting requirements
- The matter involves executive leadership or board members
Data Subject Request Escalation Triggers
- Request involves a minor's data, or is from/on behalf of a minor
- Request is from a regulatory authority (not an individual)
- Request involves data that is subject to a litigation hold
- Requester is a current or former employee with an active dispute or HR matter
- Request scope is unusually broad or appears to be a fishing expedition
- Request involves data processed in a jurisdiction with unique requirements
- Request involves special category data (health, biometric, genetic)
Discovery Hold Escalation Triggers
- The matter involves potential criminal liability
- The preservation scope is unclear, disputed, or potentially overbroad
- There are questions about whether certain data is within scope
- Prior holds for the same or related matter exist
- The hold may affect ongoing business operations significantly
- Hold conflicts with regulatory deletion requirements
- Custodian objects to the hold scope
Vendor Question Escalation Triggers
- The question involves a dispute or potential breach
- The vendor is threatening litigation or termination
- The question involves regulatory compliance (not just contract terms)
- The response could create a binding commitment or waiver
- Response could affect ongoing negotiation
NDA Request Escalation Triggers
- The counterparty is a competitor
- The NDA involves government classified information
- The business context suggests the NDA is for a potential M&A transaction
- The request involves unusual subject matter (AI training data, biometric data, etc.)
Subpoena / Legal Process Escalation Triggers
- ALWAYS requires counsel review (templates are starting points only)
- Privilege issues identified
- Third-party data involved
- Cross-border production issues
- Unreasonable timeline
When an escalation trigger is detected:
- Stop: Do not generate a templated response
- Alert: Inform the user that an escalation trigger has been detected
- Explain: Describe which trigger was detected and why it matters
- Recommend: Suggest the appropriate escalation path (senior counsel, outside counsel, specific team member)
- Offer: Provide a draft for counsel review (clearly marked as "DRAFT - FOR COUNSEL REVIEW ONLY") rather than a final response
Step 4: Gather Specific Details
Prompt the user for the details needed to customize the response:
Data Subject Request:
- Requester name and contact information
- Type of request (access, deletion, correction, portability, opt-out)
- What data is involved
- Applicable regulation (GDPR, CCPA, CPRA, other)
- Response deadline
Discovery Hold:
- Matter name and reference number
- Custodians (who needs to preserve)
- Scope of preservation (date range, data types, systems)
- Outside counsel contact
- Effective date
Vendor Question:
- Vendor name
- Reference agreement (if applicable)
- Specific question being addressed
- Relevant contract provisions
NDA Request:
- Requesting business team and contact
- Counterparty name
- Purpose of the NDA
- Mutual or unilateral
- Any special requirements
Step 5: Generate Response
Populate the template with the gathered details. Ensure the response:
- Uses appropriate tone (professional, clear, not overly legalistic for business audiences)
- Includes all required legal elements for the response type
- References specific dates, deadlines, and obligations
- Provides clear next steps for the recipient
- Includes appropriate disclaimers or caveats
Present the draft response to the user for review before sending.
Customization Guidelines
Required customization — Every templated response MUST be customized with:
- Correct names, dates, and reference numbers
- Specific facts of the situation
- Applicable jurisdiction and regulation
- Correct response deadlines based on when the inquiry was received
- Appropriate signature block and contact information
Tone adjustment — Adjust tone based on:
- Audience: Internal vs. external, business vs. legal, individual vs. regulatory authority
- Relationship: New counterparty vs. existing partner vs. adversarial party
- Sensitivity: Routine inquiry vs. contentious matter vs. regulatory investigation
- Urgency: Standard timeline vs. expedited response needed
Jurisdiction-specific adjustments:
- Verify that cited regulations are correct for the requester's jurisdiction
- Adjust timelines to match applicable law
- Include jurisdiction-specific rights information
- Use jurisdiction-appropriate legal terminology
Step 6: Template Creation (If No Template Exists)
If the user wants to create a new template, walk through the Template Creation Guide (see below) and present the finished template for review. Suggest the user save the approved template to their local settings for future use.
Response Categories
1. Data Subject Requests (DSRs)
Sub-categories:
- Acknowledgment of receipt
- Identity verification request
- Fulfillment response (access, deletion, correction)
- Partial denial with explanation
- Full denial with explanation
- Extension notification
Key template elements:
- Reference to applicable regulation (GDPR, CCPA, etc.)
- Specific timeline for response
- Identity verification requirements
- Rights of the data subject (including right to complain to supervisory authority)
- Contact information for follow-up
Example template structure:
Subject: Your Data [Access/Deletion/Correction] Request - Reference {{request_id}}
Dear {{requester_name}},
We have received your request dated {{request_date}} to [access/delete/correct] your personal data under [applicable regulation].
[Acknowledgment / verification request / fulfillment details / denial basis]
We will respond substantively by {{response_deadline}}.
[Contact information]
[Rights information]
2. Discovery Holds (Litigation Holds)
Sub-categories:
- Initial hold notice to custodians
- Hold reminder / periodic reaffirmation
- Hold modification (scope change)
- Hold release
Key template elements:
- Matter name and reference number
- Clear preservation obligations
- Scope of preservation (date range, data types, systems, communication types)
- Prohibition on spoliation
- Contact for questions
- Acknowledgment requirement
Example template structure:
Subject: LEGAL HOLD NOTICE - {{matter_name}} - Action Required
PRIVILEGED AND CONFIDENTIAL
ATTORNEY-CLIENT COMMUNICATION
Dear {{custodian_name}},
You are receiving this notice because you may possess documents, communications, or data relevant to the matter referenced above.
PRESERVATION OBLIGATION:
Effective immediately, you must preserve all documents and electronically stored information (ESI) related to:
- Subject matter: {{hold_scope}}
- Date range: {{start_date}} to present
- Document types: {{document_types}}
DO NOT delete, destroy, modify, or discard any potentially relevant materials.
[Specific instructions for systems, email, chat, local files]
Please acknowledge receipt of this notice by {{acknowledgment_deadline}}.
Contact {{legal_contact}} with any questions.
3. Privacy Inquiries
Sub-categories:
- Cookie/tracking inquiry responses
- Privacy policy questions
- Data sharing practice inquiries
- Children's data inquiries
- Cross-border transfer questions
Key template elements:
- Reference to the organization's privacy notice
- Specific answers based on current practices
- Links to relevant privacy documentation
- Contact information for the privacy team
4. Vendor Legal Questions
Sub-categories:
- Contract status inquiry response
- Amendment request response
- Compliance certification requests
- Audit request responses
- Insurance certificate requests
Key template elements:
- Reference to the applicable agreement
- Specific response to the vendor's question
- Any required caveats or limitations
- Next steps and timeline
5. NDA Requests
Sub-categories:
- Sending the organization's standard form NDA
- Accepting a counterparty's NDA (with markup)
- Declining an NDA request with explanation
- NDA renewal or extension
Key template elements:
- Purpose of the NDA
- Standard terms summary
- Execution instructions
- Timeline expectations
6. Subpoena / Legal Process
Sub-categories:
- Acknowledgment of receipt
- Objection letter
- Request for extension
- Compliance cover letter
Key template elements:
- Case reference and jurisdiction
- Specific objections (if any)
- Preservation confirmation
- Timeline for compliance
- Privilege log reference (if applicable)
Critical note: Subpoena responses almost always require individualized counsel review. Templates serve as starting frameworks, not final responses.
7. Insurance Notifications
Sub-categories:
- Initial claim notification
- Supplemental information
- Reservation of rights response
Key template elements:
- Policy number and coverage period
- Description of the matter or incident
- Timeline of events
- Requested coverage confirmation
Template Management Methodology
Template Organization
Templates should be organized by category and maintained in the team's local settings. Each template should include:
- Category: The type of inquiry the template addresses
- Template name: A descriptive identifier
- Use case: When this template is appropriate
- Escalation triggers: When this template should NOT be used
- Required variables: Information that must be customized for each use
- Template body: The response text with variable placeholders
- Follow-up actions: Standard steps after sending the response
- Last reviewed date: When the template was last verified for accuracy
Template Lifecycle
- Creation: Draft template based on best practices and team input
- Review: Legal team review and approval of template content
- Publication: Add to template library with metadata
- Use: Generate responses using the template
- Feedback: Track when templates are modified during use to identify improvement opportunities
- Update: Revise templates when laws, policies, or best practices change
- Retirement: Archive templates that are no longer applicable
Template Creation Guide
When helping users create new templates:
1. Define the Use Case
- What type of inquiry does this address?
- How frequently does this come up?
- Who is the typical audience?
- What is the typical urgency level?
2. Identify Required Elements
- What information must be included in every response?
- What regulatory requirements apply?
- What organizational policies govern this type of response?
3. Define Variables
- What changes with each use? (names, dates, specifics)
- What stays the same? (legal requirements, standard language)
- Use clear variable names:
{{requester_name}},{{response_deadline}},{{matter_reference}}
4. Draft the Template
- Write in clear, professional language
- Avoid unnecessary legal jargon for business audiences
- Include all legally required elements
- Add placeholders for all variable content
- Include a subject line template if for email use
5. Define Escalation Triggers
- What situations should NOT use this template?
- What characteristics indicate the matter needs individualized attention?
- Be specific: vague triggers are not useful
6. Add Metadata
- Template name and category
- Version number and last reviewed date
- Author and approver
- Follow-up actions checklist
Template Format
## Template: {{template_name}}
**Category**: {{category}}
**Version**: {{version}} | **Last Reviewed**: {{date}}
**Approved By**: {{approver}}
### Use When
- [Condition 1]
- [Condition 2]
### Do NOT Use When (Escalation Triggers)
- [Trigger 1]
- [Trigger 2]
### Variables
| Variable | Description | Example |
|---|---|---|
| {{var1}} | [what it is] | [example value] |
| {{var2}} | [what it is] | [example value] |
### Subject Line
[Subject template with {{variables}}]
### Body
[Response body with {{variables}}]
### Follow-Up Actions
1. [Action 1]
2. [Action 2]
### Notes
[Any special instructions for users of this template]
Output Format
## Generated Response: [Inquiry Type]
**To**: [recipient]
**Subject**: [subject line]
---
[Response body]
---
### Escalation Check
[Confirmation that no escalation triggers were detected, OR flagged triggers with recommendations]
### Follow-Up Actions
1. [Post-send actions]
2. [Calendar reminders to set]
3. [Tracking or logging requirements]
Notes
- Always present the draft response for user review before suggesting it be sent
- If connected to email via MCP, offer to create a draft email with the response
- Track response deadlines and offer to set calendar reminders
- For regulated responses (DSRs, subpoenas), always note the applicable deadline and regulatory requirements
- Templates should be living documents; suggest updates when the user modifies a templated response, so the template can be improved over time
04 同仓库更多 Skills
ticket-deflector
Reads a forwarded customer email or ticket, pulls order and refund status from a payments connector (PayPal, Square, or Stripe) or Shopify, account history from the CRM, and open tickets from a support desk (Zoho Desk), drafts a tone-matched reply in the owner's writing voice, and can issue a refund through the payments connector with explicit owner approval. With Shopify connected it also runs a proactive order-triage mode that surfaces orders needing attention — unfulfilled past the promised window, payment problems, pending refunds, stuck shipments — and drafts the next action for each before the customer has to ask. Use when the user says "draft a response," "answer this customer," "where's my order," "I want a refund," "check my orders," or "anything about to blow up."
tax-season-organizer
Prepares tax-season materials for the owner's accountant, not tax advice. US federal tax; a non-US business gets its closed-books packet instead. Two modes: (1) quarterly estimated tax from YTD net income in the ledger (MYOB, NetSuite, QuickBooks, Xero, or Zoho Books); (2) year-end 1099 prep, scanning the ledger, PayPal, and Stripe for contractors paid over USD 600 into a 1099-NEC list with missing W-9 flags. Any tax request routes first to /tax-prep, which confirms the books are closed and reconciled before running this skill. Use this skill directly only when the owner says the period's books are already closed: "books are closed, now do the 1099s," "run the quarterly estimate off the closed numbers," or "just the contractor W-9 list."
tax-prep
Prepares tax materials as a two-link chain — month-end-prep confirms the books are closed and reconciled first, then tax-season-organizer calculates the quarterly estimated payment or builds the year-end 1099-NEC list and accountant packet from those closed numbers. Requires a ledger (MYOB, NetSuite, QuickBooks, Xero, or Zoho Books); uses Gusto, PayPal, and Stripe when connected, else CSV upload. US federal tax math; a non-US business gets the closed-books packet. Prep material for a CPA, never tax advice, nothing filed. Trigger on "quarterly taxes," "estimated tax payment," "how much should I set aside," "1099s," "1099-NEC," "W-9s," "year-end tax prep," "get my books ready for my accountant," any phrasing that suggests a tax deadline is coming, or a question about net profit or YTD income that sounds like worry about a tax bill. An owner who says the period's books are already closed routes to tax-season-organizer directly.
speed-to-lead
Makes sure no inbound lead goes unanswered. Watches web forms, the shared inbox, and the CRM for new inquiries, qualifies each one against the owner's criteria, drafts a reply in the owner's voice with real meeting times for the owner to approve and send, routes anything hot to a human right away, and logs the whole thing to the CRM. Never sends on its own. Built to run on a schedule so overnight inquiries are drafted and sorted by morning, and works from forwarded or pasted inquiries when no connector is available. Use this whenever the owner is worried about inbound leads or response time — including phrasings like "leads are going cold," "did anyone answer that inquiry," "I keep missing form submissions," "nothing falls through the cracks," "handle my inbound," "respond to this lead," or "we lose people because nobody gets back fast enough." Reach for it for a single unanswered inquiry as readily as for a standing setup.
social-content-engine
Runs the owner's content operation as a standing thing rather than a one-off: keeps a rolling posting calendar, learns the owner's voice, generates on-brand Canva graphics, writes captions that sound like them, repurposes one asset into every channel format, and stages posts for approval instead of publishing on its own. Pulls product photos and prices from Shopify when connected; with no connectors, drafts the calendar and asset briefs for manual posting. Use this whenever the owner talks about posting, content, or social — including "I need to post more," "we've gone quiet on Instagram," "what should we post this month," "make the content," "give me a month of posts," "write this in my voice," "repurpose this," or "set up our content calendar." Reach for it for a single post as readily as for a full quarter. One handoff: a finished, approved campaign brief goes to canva-creator; this skill owns the standing operation.
smb-router
The front door to the Small Business plugin. Listens to what the owner needs right now — vague or specific — and routes them to the best skill or slash command for the moment. Also serves as a guide: explains what's available, suggests what to try next, and adapts recommendations based on stored business context. Trigger whenever the owner asks "what can you do," "help me with my business," "what should I focus on," "I don't know where to start," or any open-ended business request that doesn't clearly match a single skill.