license-compliance

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill leverages the Very Good CLI and its associated MCP tools to perform license audits, which is appropriate for its stated purpose. These resources are consistent with the skill's author, verygoodopensource.\n- [SAFE]: The skill includes defensive instructions that prevent the agent from certifying compliance based on incomplete data (such as simple dependency lists), requiring a full scan output instead.\n- [SAFE]: No unauthorized network operations, data exfiltration, or sensitive file access patterns were detected. The skill's operations are confined to reading project files and executing the designated license-checking tool.\n- [SAFE]: The reporting process follows a rigid, predefined markdown template, which limits the potential for the agent to be manipulated into executing instructions embedded in processed scan data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 07:46 AM