Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add the-open-agent/oss-skills --skill license-and-legalgit clone --depth 1 https://github.com/the-open-agent/oss-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/the-open-agent/oss-skills/license-and-legal)<a href="https://agentmods.dev/skills/the-open-agent/oss-skills/license-and-legal"><img src="https://agentmods.dev/badge/skills/the-open-agent/oss-skills/license-and-legal/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/the-open-agent/oss-skills/license-and-legal"><img src="https://agentmods.dev/badge/skills/the-open-agent/oss-skills/license-and-legal.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00103 | $0.02244 |
| Opus 5 | $0.00051 | $0.01122 |
| Sonnet 5 | $0.00021 | $0.00449 |
| Haiku 4.5 | $0.00010 | $0.00224 |
Grade A, and why
license-and-legal scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sL https://raw.githubusercontent.com/licenses/license-templates/master/templates/apache.txt -o LICENSE How it starts
The opening of the file, as written. The whole thing — 190 lines — stays where its author put it; the contents beside it link to each section on GitHub.
License and Legal
Licensing decisions are cheap before the first external contribution and expensive after. Get this right early.
This skill provides engineering guidance, not legal advice. For relicensing a project with outside contributors, employer IP questions, trademark disputes, or anything with money attached, tell the user to consult a lawyer. Say it once, clearly, then give the best engineering answer you can.
Choosing a license
Ask what the user actually wants, in this order:
-
Do you want maximum adoption, including inside proprietary products? → MIT (shortest) or Apache-2.0 (adds an explicit patent grant + trademark clause). Apache-2.0 is the better default for anything with patent surface or corporate contributors. MIT is the better default for small libraries where brevity matters.
-
Do you want modifications to your code returned to the commons, but allow linking from proprietary software? → MPL-2.0 (file-level copyleft) or LGPL-3.0 (library-level, more restrictive in practice).
-
Do you want anything built on this to also be open source? → GPL-3.0. Understand the cost: many companies have blanket policies against GPL dependencies, so adoption drops sharply.
-
Same as 3, but the software will be run as a network service? → AGPL-3.0. Closes the "SaaS loophole." Adoption cost is even higher; some companies ban it outright.
-
Do you want to prevent competitors from offering it as a hosted service? → BSL 1.1, Elastic License 2.0, or SSPL. Be explicit with the user: these are not open source by the OSI definition. Do not call a BSL project "open source" — the community reaction to that mislabeling is consistently harsh. "Source-available" is the accurate term.
Defaults worth stating: Apache-2.0 for most new projects, MIT for small libraries, AGPL-3.0 if the business model is hosting, and honesty if the answer is source-available.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 190 lines · 103 tokens per session scan A 473d560f4c0d
license-and-legal is a skill published in the GitHub repository the-open-agent/oss-skills (5 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 103 tokens to every session and 2,244 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
iflytek-contract-intelligence-review
A contract-review workflow for scanned or digital agreements. It can recognize document text, examine clauses, detect risks, check compliance, and create translation summaries; its output is for review and is not formal legal advice.
bio-copy-number-germline-cnv-interpretation
Classify constitutional (germline) copy number variants for clinical reporting using the 2019 ACMG/ClinGen technical standards points-based framework, with ClassifyCNV and AnnotSV for semi-automated scoring. Covers the separate copy-number-loss and copy-number-gain rubrics, the five-tier classification, ClinGen…
fda
Query openFDA via VenusFactory for drugs, devices, adverse events, recalls, and regulatory submissions (510k, PMA). Use when the user needs FDA pharmacovigilance, labeling, NDC/UNII, or openFDA analytics. Do NOT use for ChEMBL bioactivity (chembldatabase) or general biomedical literature (pubmed).
akf-trust-metadata
The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA aud.
opentrons-dev-update
Guide users through setting up or updating a local development environment for the Opentrons opentrons/opentrons monorepo. Use this skill whenever a user mentions setting up or updating Opentrons development, cloning the Opentrons repo, installing or refreshing dev dependencies for Opentrons, getting started…
opentrons-dev-setup
Guide users through setting up a local development environment for the Opentrons opentrons/opentrons monorepo. Use this skill whenever a user mentions setting up Opentrons development, cloning the Opentrons repo, installing dev dependencies for Opentrons, getting started contributing to Opentrons, or hits errors…