Audits repository health by verifying required license and notice files and checking source code for license headers.
Install
mkdir -p .claude/skills/magpie-license-compliance-audit && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/18749" && unzip -o skill.zip -d .claude/skills/magpie-license-compliance-audit && rm skill.zipInstalls to .claude/skills/magpie-license-compliance-audit
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Read-only license compliance audit for one repository or a local checkout. Checks that a LICENSE file exists, that a NOTICE file is present and complete when required by the declared license, and that source files carry SPDX-License-Identifier headers consistent with the project's declared license. Produces a grouped compliance report and proposes remedies for maintainer review. Never modifies any file.Key capabilities
- →Audit license compliance for a repository
- →Check for existence of a LICENSE file
- →Verify presence and completeness of a NOTICE file
- →Ensure source files carry consistent SPDX-License-Identifier headers
- →Produce a grouped compliance report
- →Propose remedies for maintainer review
How it works
The skill scans the specified repository or local path for license artifacts, checks SPDX headers in source files, and generates a report of compliance gaps without modifying any files.
Inputs & outputs
When to use magpie-license-compliance-audit
- →Checking repository license compliance
- →Auditing SPDX headers in source files
- →Verifying the existence of NOTICE files
About magpie-license-compliance-audit
Scans local or remote repositories for license compliance issues. Identifies missing headers or inconsistent license declarations and reports findings.
|
When not to use it
- →When the user asks to apply license headers directly
- →When the task involves modifying any file
- →When the task involves opening a PR
Limitations
- →Never modifies any file
- →Never opens a PR
- →Cap source file inspection at 300 files per run
How it compares
This skill provides a read-only, structured audit of license compliance, focusing on identifying issues and proposing remedies rather than automatically applying fixes.
Compared to similar skills
magpie-license-compliance-audit side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| magpie-license-compliance-audit (this skill) | 0 | 3mo | Review | Intermediate |
| software-security | 21 | 9mo | No flags | Intermediate |
| fix-dependabot-alerts | 18 | 8mo | Review | Intermediate |
| backend-security-coder | 24 | 6mo | No flags | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by apache
View all by apache →You might also like
software-security
project-codeguard
A software security skill that integrates with Project CodeGuard to help AI coding agents write secure code and prevent common vulnerabilities. Use this skill when writing, reviewing, or modifying code to ensure secure-by-default practices are followed.
fix-dependabot-alerts
microsoft
Fix Dependabot security alerts by updating vulnerable npm dependencies. Use when the user mentions "dependabot", "security alerts", "vulnerability", "CVE", or wants to update packages with security issues.
backend-security-coder
sickn33
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
equilateral-agents
Equilateral-AI
22 production-ready AI agents with database-driven orchestration for security reviews, code quality analysis, deployment validation, infrastructure checks, and compliance. Auto-activates for security concerns, deployment tasks, code reviews, quality checks, and compliance questions. Includes upgrade paths to enterprise features (GDPR, HIPAA, multi-account AWS, ML-based optimization).
top-100-web-vulnerabilities-reference
davila7
This skill should be used when the user asks to "identify web application vulnerabilities", "explain common security flaws", "understand vulnerability categories", "learn about injection attacks", "review access control weaknesses", "analyze API security issues", "assess security misconfigurations", "understand client-side vulnerabilities", "examine mobile and IoT security flaws", or "reference the OWASP-aligned vulnerability taxonomy". Use this skill to provide comprehensive vulnerability definitions, root causes, impacts, and mitigation strategies across all major web security categories.
differential-review
trailofbits
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.