The Agent Skills Directory

Command Execution: The skill utilizes standard command-line tools such as gh, find, grep, and awk to inspect repository contents. These commands are scope-limited to reading file metadata and the first few lines of source files for license identifiers.
Local Code Execution: A pre-flight check executes a local Python module (setup_preflight) to verify the environment configuration. This is a standard setup verification pattern used to ensure the project environment is correctly prepared before auditing.
Trusted External Download: The skill provides a remedy instruction that uses curl to fetch the official Apache 2.0 license text from apache.org. This targets a well-known, trusted organization for legitimate documentation purposes.
Indirect Prompt Injection Surface: The skill processes external source code and files which could theoretically contain malicious instructions. However, the skill includes explicit 'Golden Rules' and specific instructions for the agent to treat all file content strictly as data and to ignore any embedded directives.

license-compliance-audit