skills.rest
lushly-dev
lushly-devOFFICIAL
Explore all skills by this author →
GitHub

audit-licenses

Audit OSS dependency licenses and generate SBOMs in CycloneDX and SPDX formats.

4|1|Updated Dec 30, 2025
Search Tags:#dependency analysis#attribution#SBOM#license compliance#SPDX#OSS audit#CycloneDX
One-click install
npx skills add https://github.com/lushly-dev/afd --skill audit-licenses
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit-licenses
Source: https://github.com/lushly-dev/afd/tree/main/.claude/skills/audit-licenses
Command: npx skills add https://github.com/lushly-dev/afd --skill audit-licenses

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the complex and time-consuming process of ensuring your project's open-source software dependencies comply with their respective licenses, preventing legal risks and release blockers.

Core Features & Use Cases

  • License Compliance Audits: Checks all project dependencies against a defined allowlist of permissible licenses.
  • SBOM Generation: Creates Software Bills of Materials (SBOMs) in standard formats like CycloneDX and SPDX.
  • Attribution Management: Helps ensure correct LICENSE, NOTICE, and THIRD-PARTY-LICENSES files are maintained.
  • Use Case: Before releasing a new version of your software, use this Skill to automatically audit all dependencies, generate an SBOM, and verify that all required attribution files are present and accurate.

Quick Start

Run a full OSS license compliance audit for the current project, including dependency checks and SBOM generation.

Frequently Asked Questions about audit-licenses

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate OSS license compliance audits for my project dependencies?▼

Generate SBOMs in CycloneDX or SPDX formats by scanning your project dependencies. This process categorizes licenses, checks compatibility, and produces a standardized Software Bill of Materials for compliance tracking.

Does this license compliance audit tool support Node.js, Python, and Go ecosystems?▼

Integrate automated license compliance enforcement into CI/CD pipelines to scan dependencies and maintain attribution files continuously. This ensures ongoing OSS license compliance before software releases without manual intervention.

How do I detect GPL licenses in my proprietary code dependencies?▼

Detect GPL licenses in proprietary code by running an OSS audit that categorizes dependency licenses and flags restrictive ones. This identifies potential legal risks and release blockers before deployment.

How do I generate a CycloneDX or SPDX SBOM for my project?▼

Generate SBOMs in CycloneDX or SPDX formats by scanning your project dependencies. This process categorizes licenses, checks compatibility, and produces a standardized Software Bill of Materials for compliance tracking.

Can I integrate license compliance checks into my CI/CD pipeline?▼

Integrate automated license compliance enforcement into CI/CD pipelines to scan dependencies and maintain attribution files continuously. This ensures ongoing OSS license compliance before software releases without manual intervention.

Related Skills

Explore More Legal & Compliance Skills→
jls42jls42
1

Gestion des Dépendances

Audit npm dependencies for vulnerabilities and manage updates.

Community
Intermediate
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-sbom

Export, import, analyze, and compare CycloneDX or SPDX SBOMs.

Official
Advanced
NickCrewNickCrew
29

security-testing-patterns

Identify and mitigate security vulnerabilities in CI/CD pipelines.

Community
Advanced
hardw00thardw00t
90

sca-security

Scan dependencies for CVEs and audit licenses across software projects.

Community
Advanced