audit-licenses

Identify and summarize direct dependency licenses from npm, Python, and Go manifests.

204|14|Updated Mar 25, 2026

Search Tags:#dependencies #compliance #license #artifact #open-source #gpl #agpl

Ready to run

npx skills add https://github.com/garagon/nanostack --skill audit-licenses-garagon

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: audit-licenses
Source: https://github.com/garagon/nanostack/tree/main/examples/custom-skill-template/audit-licenses
Command: npx skills add https://github.com/garagon/nanostack --skill audit-licenses-garagon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

You audit the open-source licenses of this project's dependencies. The point is compliance: some licenses (GPL, AGPL) force the project that uses them to be open-source under the same terms. The team needs to know that before shipping.

Core Features & Use Cases

Detects licenses of direct dependencies across npm, Python, and Go manifests.
Builds a concise, machine-readable artifact with a human-readable summary.
Saves an artifact so future skills can read and reason about the results.

Quick Start

Run audit-licenses on your project to generate a license report for its dependencies.

Frequently Asked Questions about audit-licenses

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit open-source licenses for project dependencies?▼

To audit open-source licenses, you run a check against project manifests to identify and summarize the licenses of direct dependencies, highlighting copyleft licenses like GPL and AGPL. It outputs a human-readable summary and a machine-readable JSON artifact for compliance tracking.

Why do I need to check for GPL and AGPL licenses before shipping?▼

You need to check for GPL and AGPL licenses because these copyleft licenses force a project that uses them to be open-sourced under the same terms. Identifying these licenses in your dependencies ensures you understand compliance obligations before shipping.

Can I check dependency licenses across npm, Python, and Go projects?▼

Yes, you can check dependency licenses across npm, Python, and Go projects. The license compliance audit reads the standard project manifests for these ecosystems to detect direct dependencies and summarize their open-source licenses.

What tools do I need to generate a license compliance report?▼

You need bash, jq, and standard project manifests to generate a license compliance report. The audit process uses these standard environment tools to read dependencies and output a JSON artifact detailing the open-source licenses.

Does the license audit save results for future automated workflows?▼

Yes, the license audit saves a machine-readable JSON artifact so future skills can read and reason about the results. This saved artifact allows downstream automated workflows to access the dependency compliance data.