Analyze Cavil legal review reports to assess package licensing risk.
npx skills add https://github.com/openSUSE/cavil --skill cavil-review
Please help me install this Agent Skill. Skill: cavil-review Source: https://github.com/openSUSE/cavil/tree/main/examples/skills/cavil-review Command: npx skills add https://github.com/openSUSE/cavil --skill cavil-review
This Skill helps legal reviewers evaluate package updates in Cavil so they can quickly identify licensing risks, declared-license mismatches, and compatibility concerns before any decision is finalized.
Ask the assistant to review the open Cavil package, compare the declared license against the report, inspect any unresolved matches, and summarize whether human review is needed.
High-intent search queries and answers about installing and using this skill.
Yes, you can verify whether the declared license matches the scanned content by comparing the declared license against the license breakdown and unresolved matches within the Cavil report to identify any mismatches.
License compliance issues that require human review include copyleft conditions, proprietary restrictions, non-commercial clauses, patent issues, export controls, and EULA-related concerns identified during the package update analysis.
Prepare a defensible package review summary by inspecting reviewer notes, gathering file context, validating license declarations against report findings, and presenting a clear accept, reject, or escalation recommendation with supporting evidence.
Automated license review works for unresolved matches by applying evidence-based comparison of file context and reviewer notes to validate license declarations and identify compatibility concerns within the software bill of materials.
openSUSEReview Cavil package reports and create concise legal triage notes.
crmagzDocument monorepo package layouts and enforce cross-package dependency rules.
openSUSEClassify unresolved Cavil license snippets into patterns, ignores, globs, or notes.
seb1nAnalyze open-source license compatibility and compliance risks across project dependencies.
