A Contract Review Prompt That Triages Risky Clauses by Severity
Use a contract review prompt to triage risky clauses into a severity rating with suggested redlines. Preparation for counsel, not legal advice.
Legal teams and founders without legal teams share a bottleneck: inbound contracts pile up, each one needs a read, and the read is slow. The pages ranking for contract review prompt mostly explain why you shouldn't use ChatGPT for it, then point at their own legal-AI product. They're not wrong about the limits. They're just not giving you the one thing that's genuinely useful: a prompt that triages a contract so you know where to spend a lawyer's hour.
That's the honest framing. A model can't redline like a senior associate who knows your risk tolerance and the deal's commercial priorities. It can read every clause, flag the ones that deviate from a standard position, rank them by how much they'd hurt, and draft a starting redline. Triage, not judgment. A contract review prompt built for triage saves the expensive review for the clauses that actually warrant it.
This post builds that prompt: the severity output contract, the patterns that keep it grounded, and the hard limits you respect or get burned by.
What a contract review prompt does
A contract review prompt is a reusable instruction that reads a contract, extracts the operative clauses, scores each against your standard positions, ranks the risk by severity, and suggests a redline per flagged clause.
The value is in the triage structure:
- Extraction with silence detection. It pulls the operative clauses and, crucially, flags standard protections that are missing. A missing limitation-of-liability clause is a risk the contract won't announce.
- Scoring against your positions. "Risky" is relative to your paper. The prompt scores deviations from what you'd normally accept, sized to the deal.
- Severity ranking. High/medium/low, so a draconian indemnity clause doesn't get the same attention as an awkward notice period.
- Suggested redlines. A starting edit per flagged clause, with the reasoning, so a human isn't drafting from a blank page.
Why the ranking pages don't ship this: their incentive runs the other way. Juro's guide gives three generic prompt templates ("flag any clauses that could expose Company A to risk") but none with severity ranking or redlines, and it pivots to Juro's own review agent (juro.com). Spellbook's risk-analysis piece is explicit that ChatGPT "lacks" jurisdiction-specific review and positions its own legal-grade tool instead, offering no copyable severity-scored prompt (spellbook.com). The caution is fair. The omission is convenient.
What you can do with this prompt
- Triage an inbound NDA or MSA in an hour and walk into counsel knowing the three clauses that matter.
- Catch missing standard protections, not just bad ones that are present.
- Generate first-draft redlines so the lawyer edits instead of drafts.
- Normalize how clauses get flagged across a high volume of similar agreements.
- Brief a non-legal stakeholder in plain English on what they're about to sign.
- Build a consistent record of which deviations you pushed back on and why.
The model can't account for your jurisdiction's quirks, your negotiation history, or your risk appetite the way your lawyer can. It can also hallucinate a confident, wrong legal conclusion, which in a contract is expensive. Every redline it suggests gets a human review before it leaves your inbox. Use the triage to direct the expensive hour, not to replace it.
Anatomy of the prompt
The severity output contract is what separates a triage tool from a glorified summarizer. Structure:
Variables
{{contract_text}} → the pasted contract
{{contract_context}} → deal size, what you're getting, your priorities
{{your_paper_or_theirs}} → whose template this is (changes the default bar)
Prompt
Role: contract triage analyst preparing a deal memo for legal review.
Task: extract operative clauses from {{contract_text}}, flag missing
standard protections, score each risk by severity against your
positions, and suggest a redline per flagged clause.
Rules: never state a legal conclusion as certain. Quote the clause text.
Size consequences to {{contract_context}}, not in the abstract.
Output contract (table):
| Clause | Risk created | Severity | Suggested redline | Why it matters here |
The "Why it matters here" column ties the abstract risk to the actual deal. A liability cap that's fine for a $5k pilot is unacceptable for a $2M commitment, and the prompt should say so because you fed it {{contract_context}}.
Where the output contract goes in the prompt
For a long contract, put the output contract after the pasted {{contract_text}}, on the final lines. Models weight the most recent tokens, so a contract specified first and a 30-page agreement pasted after will get a drifting, half-formatted result. Claude holds a ## Output format table across a long document more reliably than GPT-4o, which often needs the table headers restated on the last line to stop it summarizing instead of tabulating.
Step-by-step usage
1. Set the deal context honestly
{{contract_context}} is what makes the severity meaningful. Deal size, what you're actually buying, what you can't live without. Without it, every clause gets generic-risk scoring that doesn't help you prioritize.
2. Note whose paper it is
{{your_paper_or_theirs}} flips the default bar. On their template, expect more deviations from your positions and weight the silence-detection harder; standard protections you'd include are often quietly absent.
3. Paste and run with the contract last
Drop the contract into {{contract_text}}, keep the output contract on the final lines, and run. Read the high-severity rows first.
4. Sanity-check the legal claims
This is non-negotiable. The model will sometimes assert a legal position confidently and wrongly. Scan each "Risk created" cell with a skeptical eye, and flag anything that smells like a hallucinated rule for the lawyer.
5. Hand the redlines to counsel
Take the suggested redlines as a starting draft, not a final one. Your lawyer edits from there. The triage already told them where to look, which is the whole point.
Prompt-craft patterns
Force clause quoting. Grounding each flagged risk in the actual clause text stops the model from inventing a problem that isn't in the contract.
For every flagged clause, quote the exact contract language. If you
cannot quote it, do not flag it. No risk without a source clause.
Detect silence explicitly. Tell the model which standard protections to check for, so a missing one shows up as a high-severity gap rather than an absence nobody notices.
Check whether these standard protections are present: limitation of
liability, indemnity cap, termination for convenience, IP ownership.
List any that are absent as a separate "missing protections" section.
Ban certainty on legal conclusions. A triage prompt that hedges its legal claims is safer and, frankly, more honest about what a model can know.
Never state a legal conclusion as certain. Use "this appears to" and
flag anything jurisdiction-specific as "confirm with counsel."
Variables you'll set
| Variable | Required | What it is |
|---|---|---|
{{contract_text}} | Yes | The pasted contract to triage |
{{contract_context}} | Yes | Deal size, what you're getting, your non-negotiable priorities |
{{your_paper_or_theirs}} | Yes | Whose template it is, which sets the default acceptance bar |
Getting started
- Confirm the contract can safely go into your chosen model and tier.
- Write
{{contract_context}}with the real deal size and priorities. - Set
{{your_paper_or_theirs}}so the scoring uses the right bar. - Paste the contract and run with the output contract on the final lines.
- Read the high-severity rows and sanity-check every legal claim.
- Pass the suggested redlines to counsel as a starting draft.
- Keep the triage register as your record of what you pushed back on.
Tuning the silence detection, the consequence sizing, and the negotiation ladder by hand takes a few iterations. The pack version ships it tuned and adds the parts a single prompt can't.
The Contract Risk Triage Rubric does this end-to-end: a {{contract_text}} input drives clause extraction with definition chasing and silence detection, a severity-scored risk matrix sized to your deal, capped negotiation ladders with trades, and a sign/negotiate/escalate verdict. It's part of The Complete AI Prompts Bundle, a one-time lifetime license to the whole catalog (plus every pack added later) if you triage more than one contract.
Risk triage shows up across business functions, not just contracts. The same severity-output discipline drives the SOC 2 readiness prompt for compliance gaps and the vendor security assessment prompt for third-party risk. If you build decisions off the triage, a structured decision aid keeps the call honest, and the Decision Pros & Cons free pack is a clean place to start before you commit to the redline.
Get the Contract Risk Triage Rubric →Common questions
Can ChatGPT review a contract?
What should a contract review prompt output?
Is it safe to paste a contract into ChatGPT?
Get the prompt packs this guide is built on
Ready-to-paste prompts with documented variables and usage guides for ChatGPT, Claude, and Gemini. One-time payment, own it forever.
More prompt guides

Tabletop Exercise Prompt: Build an IR Scenario in Minutes
Most security teams run the same tabletop exercise twice and then stop. The scenario PDF goes stale, the injects name systems the team retired a year ago, and nobody wants to spend a week writing a fr…

A Vendor Security Assessment Prompt That Scores a SOC 2 Report
Third-party risk teams all hit the same wall. A vendor sends a 90-page SOC 2 Type 2 report, someone has to read it, find the exceptions buried in the testing tables, decide whether the exceptions matt…

How to Write a SOC 2 Readiness Prompt That Lists Your Control Gaps
Most teams meet SOC 2 the same way: a sales call with a compliance vendor, a quote, and a six-week wait for a readiness assessment. The vendor pages that rank for soc 2 readiness prompt are exactly th…