Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/fmind/dotfiles/project-licensenpx skills add fmind/dotfiles --skill project-licensegit clone --depth 1 https://github.com/fmind/dotfilesWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00037 | $0.00548 |
| Opus 5 | $0.00018 | $0.00274 |
| Sonnet 5 | $0.00007 | $0.00110 |
| Haiku 4.5 | $0.00004 | $0.00055 |
Grade A, and why
project-license scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Create Project License
Select, generate, and apply the correct LICENSE file for a repository based on its namespace and ownership.
Workflow
- Detect Ownership & Organization: Inspect git remotes (
git remote -v), configuration files (pyproject.toml,go.mod, etc.), or directory naming to determine the repository's target GitHub organization or user namespace. - Select License Standard:
- If the project is associated with the GitHub organizations or users
fmindorfmind-ai(e.g.,github.com/fmind/...,github.com/fmind-ai/...) and is public, use the MIT License. - Otherwise, the project is Proprietary and must NOT use an open-source license.
- If the project is associated with the GitHub organizations or users
- Generate LICENSE File:
- Write the resolved license content to a
LICENSEfile at the root of the project. - Use the correct copyright holder name "Médéric Hurier (Fmind)" and the current year (e.g.,
2026).
- Write the resolved license content to a
- Update Configuration Files: For Python, set the PEP 639 SPDX
licensefield inpyproject.toml—license = "MIT"for MIT orlicense = "LicenseRef-Proprietary"for proprietary (plain"Proprietary"is not a valid SPDX expression and modern build tools reject it) — and addlicense-files = ["LICENSE"]. Go modules have no license field ingo.mod.
License Templates
To keep this skill light and maintainable, the license texts are stored as separate files:
- MIT License Template: MIT (for
fmindandfmind-aiprojects, resolving<year>). - Proprietary License Reference: PROPRIETARY (for any other projects, resolving
<year>).
Gotchas
- Current Year: Always dynamically determine the current calendar year when writing
<year>.
Documentation
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 41 lines · 37 tokens per session scan A 660195395e66
project-license is a skill published in the GitHub repository fmind/dotfiles (4 stars, last pushed 3d ago), licensed MIT. It adds 37 tokens to every session and 548 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
dotfiles-bootstrap
Bootstrap a workstation with the dotfiles framework. Takes a GitHub user / owner+repo / explicit clone URL and runs dot init (which shells out to chezmoi) with the right safety prompts. Honors the active agent profile (ask / plan / apply / audit) so it defaults to dry-run in safer modes and full apply in apply.
lov-china-website-filing
面向中国大陆网站的一站式备案与上线 Skill Kit：当用户说“办 ICP 备案”“做公安联网备案”“备案后绑定域名”或 "handle China website filing" 时，按权威页面完成材料、审核、域名切换、合规展示与巡检留痕。.
vibe
Delegate a coding task to a cheap AI model (Mistral Vibe by default, but any provider Vibe knows about — DeepSeek, Gemini Flash, etc.) and supervise the result via git diff. Claude orchestrates, the cheap model codes. Claude consumes 500-1500 tokens per delegation regardless of how many file reads the delegate does…
contract-review-pro
Professional-grade contract review skill that adds comment-based issue annotations without changing original text. Enforces a four-layer review (entity verification, basic, business, legal), writes structured comments (issue type, risk reason, revision suggestion) with risk level encoded via reviewer name, and…
lov-public-security-filing
协助已取得 ICP 并开放的网站办理公安联网备案，核验主体账号、网站与接入信息、材料、属地审核和公安备案号，并分流舆论属性安全评估；触发词包括“公安备案”与 "public security filing"。.
lov-domain-cutover
在 ICP 通过后把备案域名安全切换到中国大陆网站，核验部署、DNS、证书、HTTPS、ICP 页脚和旧域名处理；用户说“备案通过后绑定域名”或 "cut over the filed domain" 时使用。.