菜单
Audits node_modules for package licenses. Uses bash to resolve SPDX IDs without reading file contents into context. LLM inference is a last resort for a small residual set.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/digitalspeed/ai-skills --skill license-checker命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
基于 SOC 职业分类
| name | license-checker |
| description | Audits node_modules for package licenses. Uses bash to resolve SPDX IDs without reading file contents into context. LLM inference is a last resort for a small residual set. |
| author | DigitalSpeed |
Scan all packages in node_modules and produce a license compliance report. Never read raw file contents into context — use bash to pattern-match first; only buffer the irreducible unknown set.
Step 1 — Bulk resolve (single bash call, handles scoped packages, zero file reads in context):
SPDX='MIT|ISC|BSD-[0-9]+-Clause|Apache-2\.0|GPL-[23]\.0(-only|-or-later)?|LGPL-[23]\.0|AGPL-3\.0|MPL-2\.0|Unlicense|CC0-1\.0|CDDL-1\.[01]|EPL-[12]\.0|EUPL-1\.[12]'
find node_modules -mindepth 2 -maxdepth 3 -name 'package.json' \
! -path '*/.bin/*' ! -path '*/node_modules/*/node_modules/*' | while read pjson; do
dir=$(dirname "$pjson")
row=$(jq -r '[.name, .version, (.license // (.licenses | if type=="array" then map(.type//"") | join(" OR ") else (.//"") end) // ""), (.repository.url // .repository // "")] | @tsv' "$pjson" 2>/dev/null)
lic=$(printf | -f3)
[ -z ];
lfile=$(find -maxdepth 1 \( -iname -o -iname -o -iname \) 2>/dev/null | -1)
match=$(grep -iom1 -E 2>/dev/null | -1)
[ -n ];
Output is TSV: name version license repository. Rows where license is UNKNOWN proceed to step 2.
Step 2 — LLM inference for residual unknowns only:
For each UNKNOWN package, read the first 500 chars of its license file (or README if absent). Apply:
SPDX ID only. Append * if inferred from file (not package.json). Text:
[500-char buffer]
Step 3 — Render report using the format in §2.
Tree format sorted alphabetically by name@version. An * suffix on a license means it was inferred from a file, not package.json.
├─ lodash@4.17.21
│ ├─ repository: https://github.com/lodash/lodash
│ └─ licenses: MIT
├─ some-lib@1.2.0
│ ├─ repository: https://github.com/some/lib
│ └─ licenses: GPL-3.0*
└─ ghost-pkg@1.0.0
└─ licenses: UNKNOWN
Omit the repository line if the field is empty. Use ├─ for all entries except the last, which uses └─. Sub-fields always use │ ├─ / │ └─ (or ├─ / └─ under a └─ parent).
Summary line after the tree:
Scanned: N | Confirmed: N | Inferred (*): N | Unknown: N
⚠️ Copyleft: [packages with GPL / LGPL / AGPL / MPL / EUPL licenses]
Orchestrates Jira ticket creation from Figma designs using Atomic Design principles. Use this when initializing a project or syncing design specs to Jira for development.
Technical standards and best practices for creating and managing Slice and Custom Type preview images in Prismic Slice Machine.
Generates high-quality B2B technical articles following the "Digital Speed" methodology; DX-focused, Spec-Driven, and practitioner-led. Use when asked to create an article.