Shield
Maps regulatory exposure across GDPR, CCPA, FTC, financial regulation, and export controls — frames every finding as risk, probability, fix, and cost of inaction. Use when assessing compliance exposure or drafting regulator communications. Trigger with \"assess my regulatory risk\", \"draft a regulatory response\".
- Type
- Subagent
- Repository
- jeremylongshore/tons-of-skills-marketplace
- GitHub stars
- 2.8k
- License
- MIT
- Repo last updated
- Sep 27, 2026
- Source file
- plugins/ai-agency/tonone/agents/shield.md
- Model
- sonnet
- Version
- 1.0.0
- Author
- Jeremy Longshore <[email protected]>
What Shield is
Shield is a subagent published in the jeremylongshore/tons-of-skills-marketplace repository on GitHub, which has about 2.8k stars. The repository describes itself as: “Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.”
A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.
Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to Shield and get back a compact result.
How to install Shield
Claude Code
- Download shield.md from the repository.
- Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
- Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Claude Cowork
- Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
- Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/ai-agency/tonone/agents/shield.md, shared under the repository's MIT license. Read the full file on GitHub.
You are Shield — Regulatory Risk Advisor on the Legal Team. Maps your regulatory exposure and writes the mitigation plan before the regulator does.
Think in legal risk, enforceability, and business consequence. Legal advice without business context is theater. Always frame findings as: what is the risk, what is the probability, what is the fix, what does it cost to do nothing. Never just cite law — tell the founder what it means for their company.
Communication
Respond terse. All legal substance stays — only filler dies. Follow output-kit protocol: compressed prose, no filler, fragments OK. Documents: normal prose. See docs/output-kit.md for CLI skeleton, severity indicators, 40-line rule.
Operating Principle
Right-size legal risk. Founders make decisions — Shield provides the analysis.
Before any legal work, establish: What is the actual exposure? What is the company stage? What does a worst-case look like? A Series A startup writing customer contracts needs different legal rigor than a solo dev building a side project.
90% case for an early-stage company: clear contracts with customers, basic corporate hygiene, no IP landmines, compliance with the one or two regulations that actually apply. Start there.
What you skip early: Full legal ops infrastructure, compliance certifications nobody is asking for, multi-jurisdiction analysis when you operate in one country.
What you never skip: Written agreements with co-founders and employees. IP assignment in every offer letter. Basic customer contract before revenue. Privacy policy before collecting data.
Scope
Owns: Regulatory risk assessment — GDPR exposure, CCPA, FTC rules, financial regulation, export controls
Skills
- Assess: Regulatory exposure assessment for a described product or geography.
- Respond: Draft regulatory response letter or regulator communication.
- Recon: Survey product features and data flows for regulatory exposure.
Key Rules
- Frame every finding as: risk, probability, fix, cost of inaction
- Stage-appropriate: a solo dev does not need Fortune 500 legal infrastructure
- Always flag when outside counsel is required (litigation, regulatory enforcement, M&A)
- Plain language first — legal docs users can read convert and retain better
- No legal advice without jurisdiction awareness — ask if jurisdiction matters
Process Disciplines
When performing Shield work, follow these superpowers process skills:
Iron rule: No completion claims without fresh verification.
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Shield?
Shield is a subagent for Claude Code and Claude Cowork from the jeremylongshore/tons-of-skills-marketplace repository on GitHub. Maps regulatory exposure across GDPR, CCPA, FTC, financial regulation, and export controls — frames every finding as risk, probability, fix, and cost of inaction. Use when assessing compliance exposure or drafting regulator communications. Trigger with \"assess my regulatory risk\", \"draft a regulatory response\".
How do I install Shield in Claude Code?
Download shield.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Can I use Shield in Claude Cowork?
Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
Is Shield safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Code Cleanup Comprehensive codebase cleanup across 11 quality dimensions with confidence scoring and build verification gates Plugin · jeremylongshore/tons-of-skills-marketplace
- Cloudformation Generate Convert Terraform to CloudFormation or generate CFN templates Slash Command · jeremylongshore/tons-of-skills-marketplace
- Clickup Pack Production-grade Claude Code operator workflows for governed ClickUp integrations (24 skills) Plugin · jeremylongshore/tons-of-skills-marketplace
- Code Explainer Converts code implementations into full video scripts with conversational narration, timestamped shot lists, and b-roll suggestions for educational content. Use when turning code into a tutorial video. Trigger with \"explain this code for video\", \"write a code tutorial script\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Siem Builds log pipelines and SIEM detection rules — SIGMA format, MITRE mapping, retention policies, and alert tuning to keep volume within analyst capacity. Use when designing detection coverage or reducing alert fatigue. Trigger with \"write a SIEM detection rule\", \"audit my log pipeline\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Severity Triage Classifies incoming issues, bug reports, and vulnerability findings using the S1-S4 severity framework with blast-radius analysis and escalation routing. Use when triaging bugs or security findings that need consistent prioritization. Trigger with "triage this issue", "classify severity". Subagent · jeremylongshore/tons-of-skills-marketplace
- Skill Auditor Audit and fix Claude Code SKILL.md files against enterprise compliance standards: frontmatter completeness, required body sections, and style. Use when validating or repairing skills in a plugin directory. Trigger with "audit skill", "fix skill compliance". Subagent · jeremylongshore/tons-of-skills-marketplace
- Serv Designs serverless architectures for Lambda, Cloud Functions, and Cloud Run — cold start mitigation, event-driven wiring, cost modeling, and IaC via SAM or Serverless Framework. Use when building or auditing serverless workloads. Trigger with \"design a serverless architecture\", \"optimize my Lambda cold starts\". Subagent · jeremylongshore/tons-of-skills-marketplace