Box Legal Workflows Contract

Contract Review Agent

PREREQUISITES:

• Use the box skill for Box MCP auth, tool selection, and base workflows. If it is not installed, run: npx skills add https://github.com/box/skills --skill box
• Use the box-legal-workflows skill for Box collaboration role definitions, Box AI usage boundaries, and reusable confirmation phrasings. If it is not installed, run: npx skills add box/skills --skill box-legal-workflows

Do contract review in Box: find contracts with Box search, compare against the firm's template with Box AI, persist results as Box metadata so they stay searchable, and monitor dates with metadata search. This skill is the contract-specific recipe; the underlying Box tool mechanics live in the capability references below. Materiality, risk, and favorability are firm-supplied criteria confirmed by an attorney — the agent extracts facts, stores them, and routes. It does not provide legal advice or decide risk.

Box capability references

Reach for these for tool mechanics rather than restating them here:

• The box skill's references/mcp-search.md — find contracts; metadata vs. keyword search, folder scoping, template schema lookup
• The box skill's references/ai-and-retrieval.md — compare to template and extract fields; pacing, text-rep/file limits, citations
• The box skill's references/content-workflows.md — metadata templates, set_file_metadata, report uploads, file comments
• The box skill's references/collaboration.md — grant the reviewing attorney access

Box metadata model

Persist review results as file metadata so contracts stay searchable. Find or inspect the firm's template using the box skill's references/mcp-search.md; create one using its references/content-workflows.md if none exists.

• Representative fields (confirm the firm's actual set): counterparty_name, contract_type, execution_date, effective_date, expiration_date, auto_renewal, notice_period_days, contract_value, governing_law, status (active/expired/terminated/under_negotiation), risk_rating, review_date, next_review_date, expiration_alert_date. Link to matters with matter_id, practice_area, matter_owner.
• The risk_rating value is the firm/attorney's determination — store it, don't decide it.

Contract search recipes

Once contracts carry metadata, use search_files_metadata (mechanics in the box skill's references/mcp-search.md; otherwise search_files_keyword with date filters):

• New since last review: execution_date >= 'YYYY-MM-DD' AND execution_date <= 'YYYY-MM-DD'
• Expiring window: expiration_date >= 'YYYY-MM-DD' AND expiration_date <= 'YYYY-MM-DD' AND status = 'active'
• By counterparty / rating: counterparty_name = 'Acme Corp' · risk_rating = 'High'

Tool selection

Workflow

1. Find: search_files_metadata or search_files_keyword. [CONFIRM: folder ID, date range/cadence]
2. Compare to template: ai_qa_multi_file (contract + firm template) → extract clauses that differ, with citations. [CONFIRM: template file ID]
3. Extract metadata: ai_extract_structured_from_metadata_template, or ai_extract_structured_from_fields_enhanced if no template.
4. Persist: set_file_metadata, including the firm-confirmed risk_rating. [CONFIRM: which fields]
5. Report: upload_file — factual differences + citations + firm-confirmed rating (observations for attorney review, not recommendations).
6. Route: create_file_comment to tag the attorney; create_collaboration if they need access. [CONFIRM: attorney, access]
7. Monitor expirations: search_files_metadata on the expiration window → create_file_comment reminders → set_file_metadata (expiration_alert_sent: yes).

Legal guardrails

Box mechanics (external-sharing confirmation, AI pacing/limits/citations, metadata writes) are governed by the capability references above and box-legal-workflows. Specific to contracts:

• Risk, materiality, and favorability are firm + attorney calls, never the agent's. If the firm has no documented criteria, route to an attorney rather than rating.
• Prompt Box AI to extract differences and cite section/page — not to judge materiality or legal risk.
• Record decisions in Box as the audit trail: the firm-confirmed rating in metadata plus the uploaded summary.