endor-license

Analyze dependency licenses to identify compliance risks and copyleft exposure.

2|Updated Feb 4, 2026
One-click install
npx skills add https://github.com/endorlabs/skills-ideas --skill endor-license-endorlabs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: endor-license
Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-license
Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-license-endorlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyze dependency licenses to identify compliance risks and copyleft exposure.

Core Features & Use Cases

  • Analyze project manifests and dependencies to surface license details and risk levels.
  • Provide actionable guidance to align licenses with project aims and risk tolerance.
  • Use case: When evaluating a new dependency, surface license compatibility and potential copyleft obligations.

Quick Start

Run the license compliance check on your project to surface license risks.

Frequently Asked Questions about endor-license

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze dependency licenses for copyleft compliance risks?

Identifying copyleft exposure requires inspecting project manifests such as package.json or go.mod and the full dependency tree. This surfaces license details and risk levels, producing a structured inventory with remediation guidance for governance.

What is the best way to check a project manifest for license compatibility?

Checking license compatibility involves analyzing the full dependency tree from your manifests to surface license details and risk levels. This produces a risk-aware report with actionable guidance to align licenses with your project aims and risk tolerance.

How do I generate a license inventory for my project dependencies?

Generating a license inventory involves scanning your manifests and the full dependency tree. The analysis surfaces license details and risk levels, providing a structured report with remediation guidance for policy enforcement and governance workflows.

Does license analysis work with Go modules and Node.js package files?

Yes, license analysis works with Go modules and Node.js by inspecting manifests like go.mod and package.json. It analyzes the full dependency tree to surface license details and risk levels for your specific project context.

When do I need to run a dependency license risk check?

You need to run a dependency license risk check when evaluating a new dependency or enforcing compliance policies. It surfaces license compatibility and potential copyleft obligations by analyzing your project manifests and the full dependency tree.

What limitations exist when identifying copyleft exposure in a dependency tree?

Identifying copyleft exposure relies on inspecting manifests like package.json and go.mod and the full dependency tree. The resulting risk-aware report provides remediation guidance, but policy enforcement requires integrating these outputs into your governance workflows.