TSA Cybersecurity Compliance
Security scan passedGuidance on US TSA cybersecurity directives for pipeline, rail and transit operators: scope, gap assessments, plans and incident reporting.

The Legal & Risk department of Chris Brock's headcount: agent playbooks for contracts, privacy, IP, compliance, legal holds and risk.
Pack · 8 skillsby
4 images
About
Headcount Legal & Risk is the legal and risk department of headcount, Chris Brock's open-source set of Agent Skills organized like a company. Its eight skills give your agent a structured way to work through contracts, privacy, intellectual property, regulatory compliance, disputes, governance and enterprise risk. Each skill loads when a request matches it and comes with a list of outside authorities it checks and cites. It's a community project. The author is clear that it isn't legal advice. The skills structure the review and name what needs qualified counsel; jurisdiction-specific questions, litigation, employment, financing and M&A go to a licensed attorney. What its skills teach your agent - Contract review: read MSAs, SOWs, NDAs, vendor and data-processing agreements in risk order (liability caps, indemnities, IP and data rights, termination, payment, service levels), with a preferred position, a fallback and a walk-away for each material point - Privacy and data protection: start from a data map, then lawful basis, consent, processor agreements, subject rights and breach obligations, including under GDPR and US state privacy laws - Intellectual property: clear a name before building on it, get ownership of paid-for work in writing, and handle open-source license obligations and IP terms in contractor and AI-tool agreements - Regulatory compliance: build an obligation map from what you sell, the data you hold and where you operate, then the controls, monitoring and responses to regulators - Disputes and legal holds: recognize when the duty to preserve starts, issue a hold that also reaches the systems that delete automatically, protect privilege and weigh settlement - Corporate governance: board and committee materials, resolutions and minutes, delegations of authority, insurance and continuity - Enterprise risk: a risk register with scores, owners and treatments, and preparing for an audit - A chief legal and risk officer skill that answers in two parts, what the law or contract requires and then the exposure of each option, and records every accepted risk with a name and a revisit date How it installs In Claude Code, run /plugin marketplace add cbrock84/headcount, then /plugin install legal-risk@headcount. The same skills ship with Codex plugin manifests for ChatGPT and Codex, or you can copy the department's skills into your project's .agents/skills folder. Skills are named department:skill, such as legal-risk:contract-review, so they don't collide with others. Good to know - It's guidance and process, not a connector: it works from what you share with your agent and doesn't connect to a contract system or your data. - Its skills are told never to give a jurisdiction-specific answer without saying that qualified counsel is required. - Within headcount it's a reviewer department: its blocking findings aren't overruled by the department under review. - The other headcount departments, such as revenue, marketing and security, install separately from the same marketplace. - MIT licensed.
Once it’s added
“Is this contract term normal?”
“Review this enterprise contract before we sign it. What's unusual and what's expensive?”
“We're adding a vendor that will process customer data. What do we need in place?”
“We just got a demand letter. What do we have to preserve, and in which systems?”
“Can we use this name for our new product?”
“Set up a risk register before our audit.”
Before you add it
Reads only
The contract, plan or situation you share in the chat · Its own list of outside authorities for each topic
Makes changes · your agent can ask first
Proposes contract positions, fallbacks and walk-aways · Drafts hold notices, obligation maps and risk registers for counsel to review
Pack · 8 skills, each with its own page
From people who use it
Step by step
No reviews yet. Used Headcount Legal & Risk? Say how it went.
Write a reviewRuns on your machine.
Runs on your machine.
Runs on your machine.
Runs on your machine.
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer ~/.copilot/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review ~/.copilot/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance ~/.copilot/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds ~/.copilot/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk ~/.copilot/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property ~/.copilot/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection ~/.copilot/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance ~/.copilot/skills/regulatory-compliance
Runs on your machine.
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer ~/.cursor/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review ~/.cursor/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance ~/.cursor/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds ~/.cursor/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk ~/.cursor/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property ~/.cursor/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection ~/.cursor/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance ~/.cursor/skills/regulatory-compliance
Runs on your machine.
/plugin marketplace add cbrock84/headcount /plugin install legal-risk@headcount
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer ~/.claude/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review ~/.claude/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance ~/.claude/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds ~/.claude/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk ~/.claude/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property ~/.claude/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection ~/.claude/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance ~/.claude/skills/regulatory-compliance
Runs on your machine.
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer ~/.agents/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review ~/.agents/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance ~/.agents/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds ~/.agents/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk ~/.agents/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property ~/.agents/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection ~/.agents/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance ~/.agents/skills/regulatory-compliance
Runs on your machine.
Runs on your machine.
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer ~/.gemini/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review ~/.gemini/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance ~/.gemini/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds ~/.gemini/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk ~/.gemini/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property ~/.gemini/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection ~/.gemini/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance ~/.gemini/skills/regulatory-compliance
Runs on your machine.
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer .agents/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review .agents/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance .agents/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds .agents/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk .agents/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property .agents/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection .agents/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance .agents/skills/regulatory-compliance
Runs on your machine.
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer ~/.openclaw/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review ~/.openclaw/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance ~/.openclaw/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds ~/.openclaw/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk ~/.openclaw/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property ~/.openclaw/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection ~/.openclaw/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance ~/.openclaw/skills/regulatory-compliance
Runs on your machine.
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer ~/.config/opencode/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review ~/.config/opencode/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance ~/.config/opencode/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds ~/.config/opencode/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk ~/.config/opencode/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property ~/.config/opencode/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection ~/.config/opencode/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance ~/.config/opencode/skills/regulatory-compliance
Runs on your machine.
npx -y degit cbrock84/headcount/plugins/legal-risk/skills/chief-legal-and-risk-officer ~/.hermes/skills/chief-legal-and-risk-officer npx -y degit cbrock84/headcount/plugins/legal-risk/skills/contract-review ~/.hermes/skills/contract-review npx -y degit cbrock84/headcount/plugins/legal-risk/skills/corporate-governance ~/.hermes/skills/corporate-governance npx -y degit cbrock84/headcount/plugins/legal-risk/skills/disputes-and-legal-holds ~/.hermes/skills/disputes-and-legal-holds npx -y degit cbrock84/headcount/plugins/legal-risk/skills/enterprise-risk ~/.hermes/skills/enterprise-risk npx -y degit cbrock84/headcount/plugins/legal-risk/skills/intellectual-property ~/.hermes/skills/intellectual-property npx -y degit cbrock84/headcount/plugins/legal-risk/skills/privacy-and-data-protection ~/.hermes/skills/privacy-and-data-protection npx -y degit cbrock84/headcount/plugins/legal-risk/skills/regulatory-compliance ~/.hermes/skills/regulatory-compliance
Scanned and passed · checked 5 h ago
Skills people install alongside Headcount Legal & Risk.
Nothing new reaches your agent until a person has looked at it.
Scanned on every change, and again when our rules improve.
Tell us and a person on the trust team will look at it. Or email [email protected].
Nobody has shared how they use Headcount Legal & Risk yet.
Security scan
Passed
Safe to install in every agent it supports. Runs in your agent, as instructions.
Skills people install alongside Headcount Legal & Risk.
Guidance on US TSA cybersecurity directives for pipeline, rail and transit operators: scope, gap assessments, plans and incident reporting.
Form a US LLC through Ramp when your business doesn’t have a legal entity yet.