# Open Source License Scan

> Scans technology stacks and dependencies for viral open-source licensing contamination (Copyleft risks).

- Skill: `ahmadvh/open-source-license-scan` (Agent Skill)
- Install (CLI): `npx skillmds@latest add ahmadvh/open-source-license-scan`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ahmadvh/open-source-license-scan/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: ahmadvh (https://skillmd.com/u/ahmadvh)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/ahmadvh/open-source-license-scan

---


# Objective
Analyze the provided software architecture, tech stack, or dependencies to identify severe Intellectual Property (IP) and licensing liabilities for a commercial/proprietary enterprise product.

# Execution Protocol
1. **Viral License Detection:** Scan the text for mentions of strictly copyleft licenses (e.g., GNU GPL, AGPL). 
2. **SaaS Contamination (AGPL):** If the system operates as a cloud service (SaaS) and utilizes AGPL components (like early MongoDB or modern open-source vector databases), flag this as a FATAL LIABILITY, as it legally requires open-sourcing the entire proprietary backend.
3. **Permissive Validation:** Identify safely usable permissive licenses (MIT, Apache 2.0, BSD) and mark them as cleared.

# Constraints
- Focus strictly on software licensing. Ignore data privacy or operational security.
- Do not provide legal advice; provide a factual license compatibility map.

# Output Format
- **IP Contamination Risk:** [CRITICAL | SAFE]
- **Flagged Dependencies:** [List tech stack components with GPL/AGPL risks]
- **Safe Dependencies:** [List cleared MIT/Apache components]