What do I need to use Licence and Notice Auditor?

The project's own licence; How it is distributed; Dependency manifests; Bundled non-code assets; Copied code.

Is Licence and Notice Auditor free to use?

Yes — run it free in the browser playground (no API key needed for the sponsored trial, or bring any provider key), or install it into Claude Code, Cursor, ChatGPT and more via npx pm-claude-skills. MIT-licensed and open source.

Licence and Notice Auditor

Q: How do I know the Licence and Notice Auditor output is good?

The skill verifies itself against its own quality checks: The not-legal-advice statement appears at the top of the output; Every distributed component has an SPDX ID or is marked unknown; Every finding is rated red, amber or green with a suggested action; Components with no licence are flagged red, not assumed permissive.

🔵 Stable🕐 updated 2026-10-04 ✅ 4.8/5 🔷 SkillSpec L3 pm-oss-launch

Use when asked to check a project's licences, audit dependencies before open-sourcing or selling, write a NOTICE file, find licence conflicts, or check whether bundled fonts, images or datasets can be shipped. Produces an inventory of code, data and media dependencies with their licences, flags for conflicts and unclear ownership, and a draft NOTICE.md, with a clear statement that the output is not legal advice.

▶ Run it free — no key needed 📝 Grade your existing draft ⬇ Add to Claude (works in Duet) 📱 Use as an app View SKILL.md ↗ What changed

🗣 Say this to your agent

“Audit my project's licences before I open-source it.”“Draft a NOTICE file for this app.”“Can I ship these fonts and icons in a commercial product?”“Check my dependencies for GPL conflicts, we distribute a desktop app.”

What to give it

▸The project's own licence — , or the licence being considered

▸How it is distributed — source only, binaries, a hosted service, an app store, embedded in hardware

▸Dependency manifests — package.json, requirements.txt, go.mod, Cargo.toml, or the output of a licence tool

▸Bundled non-code assets — fonts, icons, images, audio, video, datasets, model weights

▸Copied code — snippets from blogs, Stack Overflow, other repos, or AI tools

✅ The bar it holds itself to

Every skill in this library self-verifies — these are this skill's own quality checks, straight from its definition.

✓The not-legal-advice statement appears at the top of the output

✓Every distributed component has an SPDX ID or is marked unknown

✓Every finding is rated red, amber or green with a suggested action

✓Components with no licence are flagged red, not assumed permissive

✓Fonts, images, datasets and copied snippets are covered, not only package dependencies

✓NOTICE text from Apache-2.0 components is carried over verbatim

✓No licence term is stated without naming the source file or URL it came from

⚠️ What it refuses to do

**Auditing only package.json.** The riskiest items are often the assets.

**"No licence" read as "free to use".** It means the opposite.

**Generic compatibility verdicts.** Whether a licence conflicts depends on how the project is distributed; say how.

**Presenting the audit as clearance.** It finds problems; it does not grant permission.

Install

npx pm-claude-skills add --agent claude   # or codex · cursor · gemini · hermes
# or one-line MCP (every skill, any client):
claude mcp add pm-skills -- npx -y -p pm-claude-skills pm-claude-skills-mcp

Related skills

🔌 Embed this skill

Drop this on your blog, docs, or site — it renders a "Run this skill" card:

<div data-pm-skill="licence-notice-auditor"></div>
<script src="https://mohitagw15856.github.io/pm-claude-skills/embed.js" async></script>

💬 Discussion

Licence and Notice Auditor is one of 1326 open-source professional AI agent skills — all SkillSpec L3. Try them all in the browser · ⭐ Star on GitHub · Browse the full catalog