Fossology

STRONG · 82

Community indexed

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

Downloads0

Stars1.0K

Version1.0.0

Quality100/100 · Excellent

Trust82/100 · Review then install

Audit93/100 · Safe to try

Supply asset profile

Coding and developer agents

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

Browse track

Scenario

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Agent fit

Claude Code + CLI + Codex

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add fossology/fossology

Maintenance

fresh

14d since push

Risk

Safe to try

Permission surface may require sandboxing

GitHub quality

1.0K

100/100 quality · 88/100 trust

Coverage tags

CodingCoding agentssecuritycompliancecompliance-automation

Review notes

Permission surface may require sandboxing · Permission surface needs review: shell or command execution, filesystem or document access

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Excellent

100

High-confidence pick with strong adoption and healthy maintenance signals.

Trust

Review then install

Good shortlist signal, but the agent should review audit notes, install policy, and outcome evidence before running it.

Audit

Safe to try

Install readiness, security metadata, maintenance, and adoption risk.

Trust Score v5

Agent install candidate

Use as the primary candidate after human or sandbox review.

HTMLComplianceCodexClaude CodeCursor

Stars

1.0K GitHub stars

Repo activity

1.0K stars, 619 forks

Maintenance

14d since push

License

GPL-2.0

Install

npx skills add fossology/fossology

Install safety

standard package or runtime install path

Permission surface

shell or command execution, filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Strong README/SKILL.md context

Risk summary

Review before production

Permission surface needs review: shell or command execution, filesystem or document access
Permission surface: shell or command execution, filesystem or document access

Install readiness

Install path available

Install path is available
Repository evidence is available
License is declared
No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

Open JSON

Suited tasks

Security and compliance workflows
Claude Code teams
teams that value GitHub adoption signals
Inspect risky files

Suited agents

HTMLComplianceCodexClaude CodeCursorOpenAgentSkill CLICLI

Install decision

Command: npx skills add fossology/fossology
Policy: review
Human review: yes

Trust and risk

Trust: 82/100
Audit: 93/100
Risk level: Safe to try

Outcome loop

Endpoint: /api/agent/outcome
Event ID: resolve
Outcomes: 5

Install command

npx skills add fossology/fossology

Public audit Eval report Resolve API Install handoff

Do not use when

teams that need a vendor-supported SLA
high-compliance environments without internal security review
No major risk signals from current metadata
High-risk permission hints: Shell or command execution
Permission surface may require sandboxing

Alternative

Maigret

32.9K stars

npx skills add soxoj/maigret

Alternative

Nuclei

29.2K stars

npx skills add projectdiscovery/nuclei

Alternative

Infisical

27.4K stars

npx skills add Infisical/infisical

Alternative

Wazuh

15.9K stars

npx skills add wazuh/wazuh

Agent safety v2

61/100 · Review before install

Reviewed with permission notesreview

Usable candidate, but the agent should surface permission and audit notes before installation.

Require human approval before installing into a real workspace.

Resolve via API

high

Shell or command execution

Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

medium

Database access

Skill may inspect schemas, query databases, or work with persistent stores.

High-risk permission hints: Shell or command execution
Permission surface may require sandboxing

Install targets

Install this skill in your agent workflow

Copy the registry command or an agent-specific install prompt for Codex, Claude Code, and Cursor.

skill install

OpenAgentSkill CLI

Use the registry command when your workflow supports the OpenAgentSkill installer.

$ npx skills add fossology/fossology

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Resolve JSON

/api/agent/resolve?task=Use%20Fossology%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20Fossology%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/fossology-fossology/install

Agent should check

Task fit and alternatives from Resolve API.
Audit score, trust score, and safety policy warnings.
Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use Fossology in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20Fossology%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/fossology-fossology/install
Install command: npx skills add fossology/fossology
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/fossology-fossology/install

LLM text format

/api/skills/fossology-fossology/install?format=text

Find alternatives

/api/skills/search?q=Fossology&limit=3

Agent prompt

Use Fossology for this task. Review https://www.openagentskill.com/api/skills/fossology-fossology/install, then install with: npx skills add fossology/fossology

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/fossology-fossology

LLM text

/api/registry/manifest/fossology-fossology?format=text

Install alias

/api/registry/install/fossology-fossology

Recommend

/api/registry/recommend?task=Use%20Fossology%20in%20an%20agent%20workflow&limit=3

Agent fit

100/100

Security and compliance

Use-case tags

Security and compliance Coding agents RAG and knowledge

Platforms

HTML, Compliance, Claude Code

Audit report

Safe to try · 93/100

Review install readiness, maintenance, trust, quality, and metadata warnings before adding this skill to an agent workflow.

View audit report View eval report

Agent decision cockpit

Primary pick for Security and compliance

Use this as a leading candidate, then validate the README and install path in your own agent stack.

100

Readiness

Adopt

Stage

Role in stack

Primary pick

Primary fit

Security and compliance

Trust label

Production-ready

Install path

Command ready

Use when

Security and compliance workflows
Claude Code teams
teams that value GitHub adoption signals

Evidence

1,001 GitHub stars
recent repository activity
install command or GitHub repo available
100/100 quality profile
4 OpenAgentSkill engagement events

Review first

No major risk signals from current metadata

Implementation path

1Install it in a sandbox agent and run one Security and compliance task end to end.
2Compare output quality, latency, and failure behavior against at least one alternative.
3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Review then install

Good shortlist signal, but the agent should review audit notes, install policy, and outcome evidence before running it.

Trust score

GitHub adoption

PASS

1.0K GitHub stars

Stars/forks activity

PASS

1.0K stars, 619 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

14d since push

License clarity

PASS

GPL-2.0

Good signals

Manually verified listing
AI review approved
Install path is available
Repository evidence is available
Recently maintained repository
Meaningful GitHub adoption signal
Install command has no obvious high-risk pattern
Outcome loop is ready but needs first real agent run

Review before install

Permission surface needs review: shell or command execution, filesystem or document access
Permission surface: shell or command execution, filesystem or document access
No real agent outcome reports yet
Human review required before unattended installation

Recommended action

Use as the primary candidate after human or sandbox review.

Quality profile

Excellent candidate for agent workflows

High-confidence pick with strong adoption and healthy maintenance signals.

100

GitHub stars

1.0K

Freshness

14d ago

Install ready

Yes

License

GPL-2.0

Workflow fit

Use this skill in these scenarios

Reduce risk

Security and compliance

I need my agent to scan a project for security risks and summarize what needs attention.

Build and ship code

Coding agents

I need a coding agent that can understand a repository, edit code, and review pull requests.

Search private knowledge

RAG and knowledge

I need my agent to build a RAG workflow over documents and retrieve reliable context.

Stack fit

Add it to a complete workflow

Turn skills into distribution

Content growth agent

A stack for turning newly indexed skills into SEO briefs, social drafts, comparison pages, and reusable publishing workflows.

Scrape, clean, and reuse web data

Web data pipeline

A practical stack for agents that crawl public pages, extract clean content, normalize data, and hand it to downstream research or RAG workflows.

Inspect, patch, and verify code

Coding review agent

A stack for software agents that inspect repositories, review pull requests, generate tests, and turn findings into shippable patches.

Alternative shortlist

Compare before you install

Similar skills in this category, ranked with the same readiness and quality signals.

Compare all

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

Nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Overview

Imported by the skill-only GitHub discovery pipeline because it matches agent skill, automation, domain workflow, RAG, document-processing, data, finance, security, or developer-tool signals. Protocol-server projects are excluded from automated imports.

Platform Compatibility

htmlFULL

complianceFULL

Technical Details

Version: 1.0.0
License: GPL-2.0
Last Updated: 6/21/2026
Published: 6/21/2026

Frameworks & Tools

HTMLCompliance

Decision snapshot

Primary pick

100

Ready

Adopt

Stage

1,001 GitHub stars

Audit snapshot

Install review

Install and adoption review

Safe to try

Security: 85/100
Maintenance: 100/100
Install: 92/100

Open full audit Open eval report

Agent-proven evidence

Agent Proven evidence

Outcome reports after resolve, review, install, and one narrow run.

Proven

Needs first agent runAuto-install: review firstLast: Unknown

Success rate: —
Recent failure: —
Outcomes: 0
Output quality: —
Failed: 0
Not relevant: 0
Installs: 0
Risk blocked: 0
Setup needed: 0
Production: 0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Agent-Proven ranking Outcome contract

Install

Add to agent workflow

Free and open source. Review the audit before production use.

Compare Alternatives Auto-resolve Plan View on GitHub Documentation

Growth loop

Share kit

Scenario-led draft for Fossology, ready for a manual X post.

Curator note

Most web agents fail in the boring part: messy pages, missing context, repeatable extraction.

Fossology gives agents a cleaner path to browse, extract, and monitor web pages.

1.0K stars

https://www.openagentskill.com/skills/fossology-fossology?ref=x
#AIAgents

Open X draft

Optional reply with install command

Listing + install path for Fossology:
https://www.openagentskill.com/skills/fossology-fossology?ref=x

Install: npx skills add fossology/fossology

Open reply draft

Listing source

Community indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator: fossology
Source: fossology/fossology
Indexed by: OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This community indexed listing is attributed to fossology but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

README badge

Add this badge to your GitHub README to show the listing, trust score, and install handoff.

[![OpenAgentSkill](https://www.openagentskill.com/api/badge/fossology-fossology)](https://www.openagentskill.com/skills/fossology-fossology)

Preview badge Audit badge

Author

fossology✓

@fossology

Platform Fit

Claude Code

Health Signals

GitHub stars: 1.0K
Quality score: 63/100
Last GitHub push: Jun 19, 2026
Framework hints: 2
OpenAgentSkill views: 1
Install copies: 0
Outbound clicks: 0

Community Signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & Safety

Review then install

GitHub adoption1.0K GitHub starsPASS
Stars/forks activity1.0K stars, 619 forks; issue activity unavailable in current metadataPASS
Recent maintenance14d since pushPASS
License clarityGPL-2.0PASS
README/SKILL.md completenessMetadata includes enough usage and workflow contextPASS
Dependency/runtime riskdatabase surfacePASS

Related Skills

Maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

32.9K stars · 0 installs

Nuclei

29.2K stars · 0 installs

Infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

27.4K stars · 0 installs

Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

15.9K stars · 0 installs

Fossology

Coding and developer agents

Trust, audit, and install readiness at a glance

Agent install candidate

Review before production

Install path available

Machine-readable decision data for this skill.

Maigret

Nuclei

Infisical

Wazuh

61/100 · Review before install

Shell or command execution

Network access

Filesystem access

Database access

Install this skill in your agent workflow

OpenAgentSkill CLI

Let an agent verify fit before installing.

Give an agent the install path, not another directory page.

Agent-readable profile for automatic skill selection.

Safe to try · 93/100

Primary pick for Security and compliance

Review then install

Excellent candidate for agent workflows

Use this skill in these scenarios

Security and compliance

Coding agents

RAG and knowledge

Add it to a complete workflow

Content growth agent

Web data pipeline

Coding review agent

Compare before you install

Maigret

Nuclei

Infisical

Wazuh

Overview

Platform Compatibility

Technical Details

Primary pick

Install review

Agent Proven evidence

Add to agent workflow

Share kit

Community indexed

Claim this skill listing

README badge

Author

Tags

Platform Fit

Health Signals

Community Signal

Trust & Safety

Related Skills