skills / legal & compliance

review-contract

what it does

Review a contract against your organization's negotiation playbook — flag deviations, generate redlines, provide business impact analysis. Use when reviewing vendor or customer agreements, when you need clause-by-clause analysis against standard positions, or when preparing a negotiation strategy with prioritized redlines and fallback positions.

Verified Before and after: 2 models 1 try per case View source Download .zip

Compare the answers

Answers from Claude Sonnet 5.5 and GPT-6.1 Sol · try 1 of 1

Same request, same model, once with the skill and once without. Read both and judge for yourself.

“We're the customer on this SaaS agreement for a support ticketing tool, about $48,000 a year. Can you review the liability and indemnity sections and tell me what to push back on?”

Source material given with the request

VERIDIAN HELPDESK SUBSCRIPTION AGREEMENT (Veridian Cloud, Inc. = "Provider"; Larkspur Retail Group = "Customer") 9. Limitation of Liability. Provider's total liability arising out of this Agreement shall not exceed the fees paid by Customer in the three (3) months preceding the claim. In no event shall Provider be liable for any indirect, consequential or lost-profit damages. Customer's liability under this Agreement is not limited. 10. Indemnification. Customer shall defend, indemnify and hold harmless Provider from any and all claims, losses and expenses arising out of or relating to Customer's use of the Services or any breach of this Agreement by Customer. 11. Provider makes no warranty that the Services do not infringe any third-party rights.
with the skill
## Contract Review Summary **Parties:** Veridian Cloud, Inc. (Provider) and Larkspur Retail Group (Customer) **Your side / value:** Customer; approximately **$48,000 annually** **Review basis:** General commercial SaaS negotiating positions—not your organization’s playbook, which was not provided. This review is limited to §§9–11; other provisions may change the analysis. **Overall assessment: RED — materially provider-favorable.** Provider has a very low liability cap, Customer has unlimited liability and a broad indemnity, and Provider gives no express IP infringement protection in these excerpts. ### Top three pushbacks 1. **Make liability limits mutual and increase Provider’s cap.** Three months of fees is approximately **$12,000** at a steady payment rate—and potentially less early in the term. 2. **Narrow Customer’s indemnity.** It should not cover every claim connected with ordinary use or every contractual breach. 3. **Add Provider IP infringement indemnification.** A support tool should not leave you bearing the cost of defending claims that its technology infringes someone else’s rights. ## 1. Liability — RED / Must-have **Current language** > “Provider's total liability arising out of this Agreement shall not exceed the fees paid by Customer in the three (3) months preceding the claim. In no event shall Provider be liable for any indirect, consequential or lost-profit damages. Customer's liability under this Agreement is not limited.” ### What to push back on
Show the rest (64 more lines)
- **Asymmetry:** Your liability is unlimited; Provider’s is tightly capped. - **Insufficient recovery:** Approximately $12,000 may not cover migration, restoration, or incident-response costs. - **Payment timing:** “Fees paid” in the preceding three months could yield an unexpectedly low—or potentially zero—cap if you pay annually and the payment falls outside that window. - **One-sided damages exclusion:** Provider excludes consequential and lost-profit damages; Customer receives no corresponding protection. **Proposed replacement** > “Except as expressly provided below, each party’s aggregate liability arising out of or relating to this Agreement shall not exceed the greater of (a) $48,000 and (b) the fees paid or payable under this Agreement during the twelve months preceding the event giving rise to liability. Neither party shall be liable for indirect, incidental, special, consequential, exemplary or punitive damages, or lost profits. Each party’s aggregate liability for breach of confidentiality, and Provider’s aggregate liability for breach of its data protection or security obligations or its intellectual property indemnification obligations, shall instead be subject to a cap of three times the foregoing general cap. The damages exclusion shall not exclude amounts payable to third parties under an express indemnification obligation. Neither cap shall limit liability for fraud or willful misconduct, or Customer’s obligation to pay fees properly due for the Services.” **Rationale to share:** “We need proportionate, mutual risk allocation and a cap that does not fluctuate based on invoice timing.” **Fallback:** A mutual 12-month fee cap, with a two-times cap for confidentiality, security/data protection, and Provider IP indemnity. If Provider rejects the $48,000 floor, use **annual fees paid or payable**, not merely cash paid during a short lookback. **Business impact:** Accepting the current clause leaves you with modest recovery for Provider failures while exposing Larkspur to potentially unlimited contractual claims. Escalate any request to retain unlimited Customer liability to legal and the business owner. **Important:** Do not agree to a blanket exception for “all indemnification obligations” while §10 remains broad; that could undo the cap entirely. ## 2. Customer indemnity — RED / Must-have **Current language** > “Customer shall defend, indemnify and hold harmless Provider from any and all claims, losses and expenses arising out of or relating to Customer's use of the Services or any breach of this Agreement by Customer.” ### What to push back on “Arising out of or relating to” ordinary use is extremely broad. The provision is not expressly limited to **third-party claims**, could reach ordinary breach disputes, and does not exclude losses caused by Provider. It also lacks defense and settlement protections. **Proposed replacement** > “Customer shall defend Provider against third-party claims to the extent alleging that Customer-provided content infringes a third party’s intellectual property rights or that Customer’s use of the Services in violation of applicable law caused injury to that third party, and shall indemnify Provider for damages and reasonable legal fees finally awarded, and settlements approved by Customer, in such claims. Customer shall have no obligation to the extent a claim results from Provider’s breach of this Agreement, negligence, willful misconduct, or unauthorized modification or use of Customer content. Customer’s obligations are subject to Section 9.” Add procedures applicable to **both parties’ indemnities**: > “The indemnified party shall promptly notify the indemnifying party of the claim; delayed notice shall relieve obligations only to the extent materially prejudiced. The indemnifying party shall control the defense with reasonably qualified counsel, and the indemnified party shall provide reasonable cooperation at the indemnifying party’s expense. No settlement may admit fault by, impose nonmonetary obligations on, or fail to fully release the indemnified party without its prior written consent, not to be unreasonably withheld.” **Rationale to share:** “Indemnities should address defined third-party risks within each party’s control, not replace ordinary breach remedies.” **Fallback:** If Provider insists on an indemnity for misuse, restrict it to third-party claims **directly caused by Customer’s material breach of specifically identified use restrictions**, with Provider-caused losses excluded and the general cap retained. **Business impact:** The existing wording creates difficult-to-price exposure potentially far exceeding the annual subscription. Escalate if Provider insists on broad, uncapped use-based indemnity. ## 3. Provider IP protection — RED / Must-have **Current language** > “Provider makes no warranty that the Services do not infringe any third-party rights.” **Issue:** This disclaimer, combined with the absence of a Provider indemnity in the supplied text, leaves you without an express contractual defense if someone claims the tool infringes their IP. A non-infringement warranty and an indemnity serve different purposes; prioritize the **defense, indemnity, and continuity remedies**. **Proposed replacement** > “Provider shall defend Customer against third-party claims alleging that the Services, as supplied by Provider and used as authorized under this Agreement, infringe any patent, copyright, trademark or trade secret, and shall indemnify Customer for damages and reasonable legal fees finally awarded, and settlements approved by Provider, in such claims, subject to the procedures above and Section 9. If such a claim is made or reasonably anticipated, Provider shall, at its expense, obtain the right for Customer to continue using the Services or modify or replace them without materially reducing functionality. If neither remedy is commercially reasonable, Customer may terminate the affected Services and receive a pro rata refund of prepaid unused fees. Provider shall have no obligation to the extent a claim would not have arisen but for Customer’s unauthorized modifications or combination with items not supplied, required or authorized by Provider.” **Rationale to share:** “Provider controls the technology and is best positioned to defend its right to supply it.” **Fallback:** Accept a non-infringement warranty disclaimer **only if** the agreement separately provides meaningful IP defense and indemnification, reasonable exclusions, and refund/continuity remedies. **Business impact:** Without protection, you could incur defense costs and emergency replacement costs unrelated to the $48,000 subscription price. Escalate a refusal to provide any IP indemnity. ## Negotiation strategy and next steps Lead with these as one package: **mutual 12-month liability cap + narrow Customer indemnity + Provider IP indemnity**. Trade on the enhanced cap multiplier and warranty wording—not on unlimited Customer liability. Before finalizing, confirm: - Whether tickets will contain personal or sensitive information; if so, review the DPA and security obligations alongside §9. - Whether another section makes service credits or refunds your exclusive remedy. - Your signing deadline and any internal liability requirements. This is legal-workflow assistance, not legal advice. Qualified legal counsel should review the proposed language and full agreement before you rely on it.
without
**I would push back on all three sections.** Together, they leave you with roughly **$12,000 of recovery against Provider**, while giving Provider potentially **unlimited recourse against you**, including for broadly defined claims connected to ordinary use of the service. At a $48,000 annual spend, a practical negotiation position is a **mutual 12-month fee cap, targeted higher caps for sensitive risks, and narrowly defined, reciprocal indemnities**. Enforceability depends on governing law; this is a commercial issue-spotting review, not a jurisdiction-specific legal opinion. ## 1. Liability cap: too low and one-sided **Current problem** - Provider’s cap is only fees paid in the three months before the claim—about **$12,000 if billed monthly**. - If you pay annually, that wording could arguably produce a **zero cap** for claims made more than three months after payment. - Your liability is expressly unlimited. **Push for** - A **mutual aggregate cap** based on fees **paid or payable for the preceding 12 months**. - A first-year minimum so the cap is not tiny immediately after implementation. For example, use the fees paid or payable for the first subscription year if the claim arises during that year. - Narrow exceptions rather than leaving all Customer liability unlimited. **Commercial starting point:** approximately **$48,000 for ordinary claims**. Your obligation to pay properly due subscription fees can sit outside the cap without making every Customer breach uncapped. ## 2. Higher protection for the risks that matter
Show the rest (58 more lines)
A support ticketing platform may hold personal information and confidential customer communications. A $12,000 cap could be exhausted quickly by an incident. **Ask for a separate higher cap**, such as **2–3 times annual fees ($96,000–$144,000)**, for: - Provider’s confidentiality breaches. - Breaches of contractual security or data-protection obligations. - Provider’s IP indemnification obligations. Consider uncapped liability for fraud and willful misconduct, with treatment of gross negligence addressed under applicable law. If Provider resists uncapped IP indemnity, a higher IP cap is a possible compromise. **Important:** Make the agreement explicit about whether indemnities fall under the ordinary cap, a higher cap, or no cap. An indemnity can otherwise be largely neutralized by Section 9. ## 3. Damages exclusion: one-sided and potentially overbroad Only Provider gets protection against indirect, consequential and lost-profit damages. **Push for** - A **mutual** exclusion. - Clarification that agreed recoverable costs—such as reasonable data restoration, incident investigation, required notifications and substitute-service costs following a covered breach—are **not excluded merely because of their characterization as consequential damages**. - An exception for amounts payable to third parties under the indemnities. “Lost profits” can sometimes be direct rather than consequential damages. Consider limiting that exclusion to **indirect or consequential lost profits**, rather than categorically excluding every lost-profit claim. ## 4. Customer indemnity: substantially too broad “Any and all claims, losses and expenses arising out of or relating to Customer’s use” could reach: - Ordinary, authorized use of the tool. - Claims caused partly or entirely by Provider. - Provider’s own first-party contractual losses, not just third-party claims. - Minor contractual breaches with disproportionate defense costs. **Replace it with a third-party-only indemnity** for defined risks, such as: - Claims that Customer-provided content infringes third-party IP rights. - Customer’s unlawful use of the Services. Exclude claims to the extent caused by Provider’s breach, negligence or misconduct. Reject an indemnity for **any breach of the agreement**; ordinary breaches should generally be handled through ordinary contract remedies and the agreed liability cap. ## 5. Add Provider IP indemnity; address Section 11 Section 11 disclaims non-infringement protection, and Section 10 provides no corresponding Provider indemnity. **Ask Provider to defend and indemnify you against third-party claims that authorized use of the Services infringes IP rights**, including covered settlements and judgments. If there is an infringement issue, Provider should: 1. Obtain continued usage rights; 2. Modify or replace the affected service without materially reducing functionality; or 3. If neither is reasonably available, permit termination and refund unused prepaid fees. Any exclusions for unauthorized modifications, combinations or misuse should apply **only to the extent they caused the claim**. Delete Section 11 or expressly state that it does not limit Provider’s IP indemnity. ## 6. Add indemnity procedures Both indemnities should include: - Prompt notice, with late notice relieving obligations only to the extent of actual prejudice. - Defense by competent counsel. - Reasonable cooperation at the indemnifying party’s expense. - No settlement admitting your fault, imposing obligations on you, or failing to fully release you without your consent. **Negotiation priorities:** First eliminate unlimited Customer exposure and the broad “use of Services” indemnity; then secure Provider IP protection and a meaningful liability cap. If the tickets contain sensitive personal data, elevate security/privacy liability to that same top tier—and check the DPA for conflicting caps or exclusions.

Answers are shown exactly as the model wrote them, from the first try, and nothing is picked by hand.

The models

2 models

Claude Sonnet 5.5

made by Anthropic

claude-sonnet-5-5 · revision not reported by the provider

1 try per case · tested 3 Nov 2026

GPT-6.1 Sol

made by OpenAI

gpt-6.1-sol · revision not reported by the provider

1 try per case · tested 3 Nov 2026

The tasks

written by Carte Blanche
auto-renewal-trap

“We're the buyer on this 3-year software contract. Finance wants to know if there's anything in the term and pricing sections we should fix before signing.”

missing-dpa

“We're the customer. This marketing email vendor will hold our customer list, including about 30,000 people in the EU. Please review the data clauses.”

prioritize-for-one-call

“We're the customer. We get one 30-minute call with their counsel tomorrow. What should we push hard on and what can we let go?”

saas-one-sided-liability

“We're the customer on this SaaS agreement for a support ticketing tool, about $48,000 a year. Can you review the liability and indemnity sections and tell me what to push back on?”

vendor-side-ip-grab

“We're the vendor here: a small dev shop doing a 4-month build for a client. Their lawyer sent their services agreement. What do we need to change?”

Install

Download the .zip and unzip it. Put its files, in a folder named review-contract, here:

Claude Code~/.claude/skills/Every project. For one project only, use .claude/skills/ inside it.
Codex~/.agents/skills/Every project. For one repository only, use .agents/skills/ inside it.
Cursor~/.cursor/skills/Cursor also reads the Claude Code and Codex folders above.

Then start a new session and ask for what the skill does. Other agents that read SKILL.md have their own skills folder; check their docs.

Coming after launch: get skills from inside your agent, no download needed.