Skip to content
Get packs

Open Source License Review

Checks dependencies and outbound code for open source license risks and obligations

Source Download skill
Repository
anthropics/claude-for-legal
Stars
9,870
Licence
Apache-2.0
Files
1 file

What it does

Once installed, the agent reviews a project's dependency list (such as package.json, requirements.txt, or an SBOM), a single library, or code about to be open-sourced. It sorts each license into families like permissive, copyleft, public domain, non-open-source, or unknown, works out what obligations apply given how the software is delivered (SaaS, distributed binary, internal, or embedded), and produces a memo recommending actions such as comply, replace, remove, seek legal review, or seek a commercial license. It is designed to be read by a lawyer or an engineer working with attorney access.

Great for

  • Engineering teams checking whether a new library can ship in a product
  • In-house legal teams doing a first-pass license review before attorney sign-off
  • Teams preparing an internal project for public release and checking embedded licenses

Skip it if

  • Final legal advice: the skill itself says copyleft questions (such as AGPL network use or GPL-3.0 conveying) are untested in court and must be decided by an attorney
  • Projects with no lawyer or policy owner to act on strong copyleft or unknown-license flags, since the skill routes those to attorney review
  • Reviewing licenses for non-software content or jurisdictions outside what the practice profile covers

Try asking

  • “Review my package.json and tell me which dependencies have copyleft obligations for a desktop app we distribute.”
  • “Can we ship the redis client library in our commercial product? Check its license.”
  • “Scan my repo root for all manifests and flag any license-unknown or non-OSI packages.”
  • “I'm about to open-source this project. Check that the outbound license is compatible with every embedded dependency.”
Step-by-step guide: how to use Open Source License ReviewInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    oss-review.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip oss-review.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip oss-review.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Run the cold-start interview first so the review uses your team's OSS policy and escalation routing.
  • Give the agent the deployment model up front (SaaS, distributed binary, internal, or embedded), since the same library can carry different obligations.
  • Treat every strong copyleft or license-unknown flag as a prompt for attorney review, not a final answer.

What's inside

  • SKILL.md

Redistributed unmodified from anthropics/claude-for-legal under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.