Individual skill
oss-review
开源许可证合规检查——对依赖列表、单个库或对外发布代码。 用于审查清单/SBOM/代码仓库的copyleft义务和许可证兼容性, 当被问及某库是否可以发布、或准备将代码开源时。
ip-legal/skills/oss-review/SKILL.md
Source commit 2f01c92b2d436d3584c2108aaff38661069a967a
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Not checked yet
- Last checked
- Nov 11, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 247
- Repository last updated
- May 15, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 17,114 bytes
Read excerpt
# /oss-review
对照 `~/.claude/plugins/config/claude-for-legal/ip-legal/CLAUDE.md` 中的实务画像执行开源许可证合规检查。
按许可证族分类依赖、将义务映射到部署模式、标注许可证未知和伪装为开源的假开源包、并建议行动——合规、替换、移除、寻求法律审查、寻求商业许可。
## 使用说明
1. **加载 `~/.claude/plugins/config/claude-for-legal/ip-legal/CLAUDE.md`。** 如含占位符,停止并提示:"先运行 `/ip-legal:cold-start-interview`——在审查前我需要了解你的实务画像(及开源政策,如有)。"如实务画像指向已上传的开源政策,亦阅读该文件——它是团队认可/审查/禁止许可证的真实来源。
2. **确定范围:** 依赖列表(package.json、requirements.txt、go.mod、Gemfile、Cargo.toml、pom.xml、SBOM)、单个库或团队准备开源的对外发布代码。如用户传递了路径,从文件推断;否则询问。
3. **在分类义务前确定部署模式** — SaaS、分发二进制、仅内部使用或嵌入式。相同的依赖列表在不同模式下触发不同义务。
4. **按以下工作流执行。** 特别是: