cavil-license-research

To assess open source license risk for an unknown SPDX identifier, the Skill evaluates the license's actual obligations against a 1–7 risk scale and recommends conservative patent, trademark, EULA, and CLA flags using primary-source verification.

Cavil risk assessment is the process of mapping a license's obligations to a 1–7 risk scale. You need it when evaluating an unfamiliar license or unresolved snippet before teaching Cavil the correct pattern classification.

To research an unresolved license snippet before pattern authoring, provide the text to the Skill. It identifies the license, verifies obligations against primary sources and registries, and outputs a one-line recommendation for the pattern editor.

Yes, license risk assessment requires primary-source verification from the actual license text and authoritative registries. This ensures the obligations, risk level, and patent or trademark flags are accurate for compliance review.

The best way to evaluate patent and trademark obligations is to analyze the license text against authoritative registries. The Skill then provides conservative flag recommendations for patent, trademark, export, EULA, and CLA signals.

Yes, you can use this approach for licenses without an official SPDX identifier. It distinguishes between known names, SPDX identifiers, and unresolved snippets to produce a sourced risk recommendation.