ip-oss-review SKILL.md skillA
ip-oss-review from yuandian-ailaw/agent-for-legal-cn is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add yuandian-ailaw/agent-for-legal-cn/ip-oss-review@git:20260529.efece30Pins git:20260529.efece30 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- yuandian-ailaw/agent-for-legal-cn
- Path
legal-skillpack-ip-legal/skills/ip-oss-review/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260529.efece30, committed May 29, 2026
- Size
- 20,414 bytes
- Repository stars
- 16
- License
- a license file GitHub does not identify
面向中国法的开源许可证合规审查，对依赖清单、单一组件或对外开源代码进行许可证分类、义务映射与风险标记；当用户需要审查SBOM或依赖清单的copyleft义务、判断组件能否随产品发布、或准备代码对外开源时使用.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# /oss-review-cn 依据团队实务配置文件中的实务画像，对开源许可证进行合规审查。按许可证族分类依赖项，将义务映射到部署模式，标记许可证未知和冒充开源的非OSI组件，给出行动建议——合规、替换、移除、寻求法律审查、寻求商业许可。 ## 使用说明 1. **加载团队实务配置。** 若配置文件缺失或仍为占位符，停止并提示："请先完成实务画像配置——我需要在审查前了解团队的实务画像（及OSS策略，如有）。" 若实务画像指向已上传的OSS策略，一并读取——该策略是团队接受/需审查/禁止许可证的权威来源。 2. **确定审查范围：** 依赖清单（package.json、requirements.txt、go.mod、Gemfile、Cargo.toml、pom.xml、SBOM），单一组件，或团队准备对外开源的自有代码。若用户传入了路径，从文件推断；否则询问。 3. **在分类义务前确定部署模式**——SaaS、分发二进制、仅内部使用、嵌入式。同一依赖清单在不同部署模式下触发不同义务。 4. **按下方工作流执行。** 特别注意： - 阅读实际许可证文本，而非仅看元数据——LICENSE文件可能有误，包元数据可能过时。 - 将每个包分类为宽松型/弱copyleft/强copyleft/公共领域/非OSI/未知。 - 将许可证未知标记为"需审查"，而非默认视为宽松型。 - 标记非OSI源可用许可证（SSPL、BUSL、Commons Clause、Elastic License、fair-source）——这些不是开源软件。 - 对外开源代码，检查所选对外许可证是否与所有嵌入依赖的许可证兼容。 5. **按下方模板输出备忘录**——工作成果抬头、底线结论、顶部标记、按严重度分组的逐包清单、中国法域注释、对外开源检查（如适用）、审批路由。 6. **遵守决策姿态。** 当copyleft触发分析取决于争议问题时（AGPL的"网络交互"与中国法下"信息网络传播权"的关系、GPL-3.0的"传达"与中国法下"发行权"的对应、LGPL链接范围），标记为律师审查并列出双方因素。任何被标记为强copyleft或许可证未知的组件，须在依赖随产品发布或代码开源前由律师评估。 ## 示例 ``` /oss-review-cn ~/code/my-project/package.json /oss-review-cn ~/code/my-project/requirements.txt /oss-review-cn redis /oss-review-cn ~/code/my-project # 仓库根目录——扫描所有清单文件 ``` --- ## 协作扩展 …
Read the whole file at its exact version.
How to install
mdr add yuandian-ailaw/agent-for-legal-cn/ip-oss-review@sha256:30d5bc5a2c0d5a3bThe line at the top of this page pins the label git:20260529.efece30, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_jznyvbfpxge4lwk7)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on May 29, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (20414 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
yuandian-ailaw/agent-for-legal-cn · 16 stars · license a license file GitHub does not identify · pushed 2026-09-10 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_jznyvbfpxge4lwk7 GET https://markdownregistry.com/api/v1/resolve?ref=yuandian-ailaw/agent-for-legal-cn/ip-oss-review GET https://markdownregistry.com/api/v1/blob/30d5bc5a2c0d5a3b95809268c2f65fe0f40280c8e83ba1a9ac7230098f70920c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.