Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add opendatahub-io/ai-helpers --skill python-packaging-license-checkergit clone --depth 1 https://github.com/opendatahub-io/ai-helpersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/opendatahub-io/ai-helpers/python-packaging-license-checker)<a href="https://agentmods.dev/skills/opendatahub-io/ai-helpers/python-packaging-license-checker"><img src="https://agentmods.dev/badge/skills/opendatahub-io/ai-helpers/python-packaging-license-checker/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/opendatahub-io/ai-helpers/python-packaging-license-checker"><img src="https://agentmods.dev/badge/skills/opendatahub-io/ai-helpers/python-packaging-license-checker.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00053 | $0.02701 |
| Opus 5.5 | $0.00021 | $0.01080 |
| Sonnet 5.5 | $0.00011 | $0.00540 |
| Haiku 4.5 | $0.00005 | $0.00270 |
Grade C, and why
python-packaging-license-checker scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
rm -rf -- "${CLONE_DIR}" How it starts
The opening of the file, as written. The whole thing — 244 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Python Package License Compatibility Checker
Evaluate whether a Python package license permits redistribution in Red Hat products.
Policy basis: Red Hat redistribution policy follows the Fedora Linux license policy. Use the Fedora License Data as the authoritative source -- NOT OSI-approval status.
Inputs
- package_name: Python package name
- repo_url: upstream repository URL (if already known — skip the source-finder step and clone this directly)
- source_available: whether buildable source exists (if already known)
- upstream_org: name and primary country of the maintaining organisation (if already known)
Step 1: Locate and clone the source repository
If a repo_url is provided, skip the source-finder step and use the provided URL directly with the git-shallow-clone skill.
Otherwise, use the python-packaging-source-finder skill to find the upstream repo URL:
Skill: python-packaging-source-finder
Then use the git-shallow-clone skill to clone the repository locally:
Skill: git-shallow-clone
This gives a local path to the cloned repo for deterministic license inspection.
Step 2: Read the license from source
Search the cloned repo root for license files in this order: LICENSE, LICENSE.txt, LICENSE.md, COPYING, COPYING.txt, LICENCE, LICENCE.txt
ls <clone_path>/{LICENSE,COPYING,LICENCE}{,.txt,.md} 2>/dev/null | head -1
Read the license file (up to 128 KB) and map to an SPDX identifier. If the file exceeds 128 KB, read only the first 128 KB and note the truncation. If the file cannot be read within 30 seconds, treat it as unreadable and set Verdict: NEEDS-HUMAN-REVIEW with a note explaining the timeout.
Also check pyproject.toml or setup.cfg for a license field as a secondary
signal. If the PyPI metadata license differs from the source file, set
Source verified: MISMATCH (PyPI: [X], repo: [Y]) and use the source file as
authoritative.
Normalise to SPDX ID using exact then fuzzy matching:
- Deterministic: "Apache 2" -> Apache-2.0, "GPL v2" -> GPL-2.0-only, "MIT License" -> MIT, "LGPLv2.1" -> LGPL-2.1-only
- Ambiguous (do NOT auto-map): "BSD", "GPLv3" -> set NEEDS-HUMAN-REVIEW. These tokens map to multiple SPDX IDs; require human confirmation.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 244 lines · 53 tokens per session scan C e92f237d83fb
python-packaging-license-checker is a skill published in the GitHub repository opendatahub-io/ai-helpers (38 stars, last pushed 2d ago), licensed Apache-2.0. It adds 53 tokens to every session and 2,701 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
fastapi-templates
Create production-ready FastAPI projects with async patterns, dependency injection, and comprehensive error handling. Use when building new FastAPI applications or setting up backend API projects.
temporal-python-testing
Test Temporal workflows with pytest, time-skipping, and mocking strategies. Covers unit testing, integration testing, replay testing, and local development setup. Use when implementing Temporal workflow tests or debugging test failures.
manimgl-best-practices
Trigger when: (1) User mentions "manimgl" or "ManimGL" or "3b1b manim", (2) Code contains from manimlib import , (3) User runs manimgl CLI commands, (4) Working with InteractiveScene, self.frame, self.embed(), ShowCreation(), or ManimGL-specific patterns. Best practices for ManimGL (Grant Sanderson's 3Blue1Brown…
ampl-installer
Expert in installing amplpy, AMPL modules (solvers), and license activation. Explains Community Edition, academic, trial, and commercial AMPL licenses. Use when setting up a new environment, pip/modules errors, license UUID, portal signup, Colab/Docker install, or which license fits your situation.
ampl-python
Expert in amplpy and Python integration with AMPL. Use when writing or refactoring amplpy scripts, notebooks, FastAPI services, data pipelines (pandas/polars), solver configuration via Python, result extraction, or Colab/MO-Book Python workflows. Knows amplpy.ampl.com and dev.ampl.com amplpy best practices.
python-patterns
Pythonic idioms, PEP 8 standards, type hints, and best practices for building robust, efficient, and maintainable Python applications.