OpenAgentSkill Registry Manifest
Skill: magpie-dependency-license-audit
Slug: apache-magpie-dependency-license-audit
Category: security
Description: Read-only license audit of a project's direct and transitive dependency
tree. Detects the dependency manager(s), resolves each dependency's
declared license from ecosystem metadata, classifies each against a
configured policy (ASF three-category A/B/X model or a custom allowlist),
and surfaces incompatible, forbidden, and unknown-license dependencies for
maintainer review. Never modifies manifests or lock files.

Agent fit:
- Decision: 65/100 Prototype first
- Primary fit: GitHub automation
- Role: Fallback candidate

Supply profile:
- Track: Coding and developer agents
- Scenario: GitHub automation
- Applicable agents: Claude Code, CLI, Codex, Cursor
- Maintenance: 6d since push
- Risk: Needs review

Trust:
- Trust score: 74/100 Strong shortlist
- Audit: 78/100 Needs review

Attribution:
- Status: Registry indexed
- Source: github candidate review
- Creator: apache
- Claim URL: https://www.openagentskill.com/skills/apache-magpie-dependency-license-audit#claim-this-skill

Install:
npx skills add apache/magpie --skill magpie-dependency-license-audit

URLs:
- Web: https://www.openagentskill.com/skills/apache-magpie-dependency-license-audit
- API: https://www.openagentskill.com/api/agent/skills/apache-magpie-dependency-license-audit
- Install API: https://www.openagentskill.com/api/skills/apache-magpie-dependency-license-audit/install
- Repository: https://github.com/apache/magpie/tree/main/skills/dependency-license-audit