Skill: aipoch-ai/open-source-license-check (version 1.0.0)

--- name: open-source-license-check description: Check if referenced bioinformatics software/code licenses allow commercial use (GPL vs MIT, etc.). license: MIT skill-author: AIPOCH --- # Open Source License Check Check if referenced bioinformatics software/code licenses allow commercial use (GPL vs MIT, etc.). ## When to Use - Use this skill when the task needs Check if referenced bioinformatics software/code licenses allow commercial use (GPL vs MIT, etc.). - Use this skill for evidence insight tasks that require explicit assumptions, bounded scope, and a reproducible output format. - Use this skill when you need a documented fallback path for missing inputs, execution errors, or partial evidence. ## Key Features - Scope-focused workflow aligned to: Check if referenced bioinformatics software/code licenses allow commercial use (GPL vs MIT, etc.). - Packaged executable path(s): `scripts/main.py`. - Reference material available in `references/` for task-specific guidance. - Structured execution path designed to keep outputs consistent and reviewable. ## Dependencies See `## Prerequisites` above for related details. - `Python`: `3.10+`. Repository baseline for current packaged skills. - `Third-party packages`: `not explicitly version-pinned in this skill package`. Add pinned versions if this skill needs stricter environment control. ## Example Usage See `## Usage` above for related details. ```bash cd "20260318/scientific-skills/Evidence Insight/open-source-license-check" python -m py_compile scripts/main.py python scripts/main.py --help ``` Example run plan: 1. Confirm the user input, output path, and any required config values. 2. Edit the in-file `CONFIG` block or documented parameters if the script uses fixed settings. 3. Run `python scripts/main.py` with the validated inputs. 4. Review the generated output and return the final artifact with any assumptions called out. ## Implementation Details See `## Workflow` above for related details. - Execution model: validate the request, choose the packaged workflow, and produce a bounded deliverable. - Input controls: confirm the source files, scope limits, output format, and acceptance criteria before running any script. - Primary implementation surface: `scripts/main.py`. - Reference guidance: `references/` contains supporting rules, prompts, or checklists. - Parameters to clarify first: input path, output path, scope filters, thresholds, and any domain-specific constraints. - Output discipline: keep results reproducible, identify assumptions explicitly, and avoid undocumented side effects. ## Quick Check Use this command to verify that the packaged script entry point can be parsed before deeper execution. ```bash python -m py_compile scripts/main.py ``` ## Audit-Ready Commands Use these concrete commands for validation. They are intentionally self-contained and avoid placeholder paths. ```bash python -m py_compile scripts/main.py python scripts/main.py --help ``` ## Workflow 1. Confirm the user objective, required inputs, and non-negotiable constraints before doing detailed work. 2. Validate that the request matches the documented scope and stop early if the task would require unsupported assumptions. 3. Use the packaged script path or the documented reasoning path with only the inputs that are actually available. 4. Return a structured result that separates assumptions, deliverables, risks, and unresolved items. 5. If execution fails or inputs are incomplete, switch to the fallback path and state exactly what blocked full completion. ## Usage ```text python scripts/main.py --software "samtools,bwa,bedtools" python scripts/main.py --check-requirements requirements.txt ``` ## Parameters - `--software`: Comma-separated software names - `--check-requirements`: Check Python requirements file - `--check-directory`: Scan directory for license files ## License Types | License | Commercial Use | Notes | |---------|---------------|-------| | MIT | ✅ Yes | Permissive | | Apache-2.0 | ✅ Yes | Permissive | | BSD | ✅ Yes | Permissive | | GPL-3.0 | ⚠️ Copyleft | Must open source derivative | | GPL-2.0 | ⚠️ Copyleft | Must open source derivative | | AGPL | ❌ No | Network use is distribution | ## Output - License compatibility report - Commercial use warnings - Compliance recommendations ## Risk Assessment | Risk Indicator | Assessment | Level | |----------------|------------|-------| | Code Execution | Python/R scripts executed locally | Medium | | Network Access | No external API calls | Low | | File System Access | Read input files, write output files | Medium | | Instruction Tampering | Standard prompt guidelines | Low | | Data Exposure | Output files saved to workspace | Low | ## Security Checklist - [ ] No hardcoded credentials or API keys - [ ] No unauthorized file system access (../) - [ ] Output does not expose sensitive information - [ ] Prompt injection protections in place - [ ] Input file paths validated (no ../ traversal) - [ ] Output directory restricted to workspace - [ ] Script execution in sandboxed environment - [ ] Error messages sanitized (no stack traces exposed) - [ ] Dependencies audited ## Prerequisites No additional Python packages required. ## Evaluation Criteria ### Success Metrics - [ ] Successfully executes main functionality - [ ] Output meets quality standards - [ ] Handles edge cases gracefully - [ ] Performance is acceptable ### Test Cases 1. **Basic Functionality**: Standard input → Expected output 2. **Edge Case**: Invalid input → Graceful error handling 3. **Performance**: Large dataset → Acceptable processing time ## Lifecycle Status - **Current Stage**: Draft - **Next Review Date**: 2026-03-06 - **Known Issues**: None - **Planned Improvements**: - Performance optimization - Additional feature support ## Output Requirements Every final response should make these items explicit when they are relevant: - Objective or requested deliverable - Inputs used and assumptions introduced - Workflow or decision path - Core result, recommendation, or artifact - Constraints, risks, caveats, or validation needs - Unresolved items and next-step checks ## Error Handling - If required inputs are missing, state exactly which fields are missing and request only the minimum additional information. - If the task goes outside the documented scope, stop instead of guessing or silently widening the assignment. - If `scripts/main.py` fails, report the failure point, summarize what still can be completed safely, and provide a manual fallback. - Do not fabricate files, citations, data, search results, or execution outcomes. ## Input Validation This skill accepts requests that match the documented purpose of `open-source-license-check` and include enough context to complete the workflow safely. Do not continue the workflow when the request is out of scope, missing a critical input, or would require unsupported assumptions. Instead respond: > `open-source-license-check` only handles its documented workflow. Please provide the missing required inputs or switch to a more suitable skill. ## References - [references/audit-reference.md](references/audit-reference.md) - Supported scope, audit commands, and fallback boundaries ## Response Template Use the following fixed structure for non-trivial requests: 1. Objective 2. Inputs Received 3. Assumptions 4. Workflow 5. Deliverable 6. Risks and Limits 7. Next Checks If the request is simple, you may compress the structure, but still keep assumptions and limits explicit when they affect correctness.

path: references/audit-reference.md
content: # Audit Reference

## Scope

- Skill: `open-source-license-check`
- Core purpose: Check if referenced bioinformatics software/code licenses allow commercial use (GPL vs MIT, etc.).
- Use only within the documented workflow and category boundary defined in `SKILL.md`

## Supported Audit Paths

- `python -m py_compile scripts/main.py`
- `python scripts/main.py --help`

## Fallback Boundary

If required inputs are incomplete, the skill should still return:

- the missing required inputs
- the steps that can still be completed safely
- assumptions that need confirmation before execution
- the next checks before accepting the final deliverable


path: scripts/main.py
content: #!/usr/bin/env python3
"""
Open Source License Check
Check bioinformatics software licenses for commercial use.
"""

import argparse
from pathlib import Path


class LicenseChecker:
    """Check software licenses."""
    
    LICENSE_DB = {
        "samtools": {"license": "MIT", "commercial": True, "copyleft": False},
        "bwa": {"license": "GPL-3.0", "commercial": True, "copyleft": True},
        "bedtools": {"license": "MIT", "commercial": True, "copyleft": False},
        "bowtie2": {"license": "MIT", "commercial": True, "copyleft": False},
        "star": {"license": "GPL-3.0", "commercial": True, "copyleft": True},
        "hisat2": {"license": "GPL-3.0", "commercial": True, "copyleft": True},
        "salmon": {"license": "GPL-3.0", "commercial": True, "copyleft": True},
        "kallisto": {"license": "BSD-2", "commercial": True, "copyleft": False},
        "deseq2": {"license": "LGPL-3.0", "commercial": True, "copyleft": True},
        "edger": {"license": "GPL-3.0", "commercial": True, "copyleft": True},
        "limma": {"license": "GPL-3.0", "commercial": True, "copyleft": True},
        "ggplot2": {"license": "MIT", "commercial": True, "copyleft": False},
        "pandas": {"license": "BSD-3", "commercial": True, "copyleft": False},
        "numpy": {"license": "BSD-3", "commercial": True, "copyleft": False},
        "scipy": {"license": "BSD-3", "commercial": True, "copyleft": False},
        "scikit-learn": {"license": "BSD-3", "commercial": True, "copyleft": False},
        "tensorflow": {"license": "Apache-2.0", "commercial": True, "copyleft": False},
        "pytorch": {"license": "BSD-3", "commercial": True, "copyleft": False},
    }
    
    def check(self, software_name):
        """Check license for software."""
        name = software_name.lower().strip()
        if name in self.LICENSE_DB:
            return self.LICENSE_DB[name]
        return None
    
    def print_report(self, software_list):
        """Print license report."""
        print(f"\n{'='*70}")
        print(f"{'Software':<20} {'License':<15} {'Commercial':<12} {'Risk'}")
        print(f"{'='*70}")
        
        warnings = []
        for sw in software_list:
            info = self.check(sw)
            if info:
                status = "✅ Yes" if info["commercial"] else "❌ No"
                risk = "⚠️ Copyleft" if info["copyleft"] else "✓ Safe"
                print(f"{sw:<20} {info['license']:<15} {status:<12} {risk}")
                if info["copyleft"]:
                    warnings.append((sw, info["license"]))
            else:
                print(f"{sw:<20} {'Unknown':<15} {'?':<12} {'⚠️ Check manually'}")
        
        print(f"{'='*70}\n")
        
        if warnings:
            print("⚠️  WARNINGS - Copyleft licenses require source code sharing:")
            for sw, lic in warnings:
                print(f"  - {sw} ({lic}): Must open-source derivative works")
            print()


def main():
    parser = argparse.ArgumentParser(description="Open Source License Check")
    parser.add_argument("--software", "-s", help="Comma-separated software names")
    parser.add_argument("--check-requirements", "-r", help="Python requirements.txt file")
    
    args = parser.parse_args()
    
    checker = LicenseChecker()
    
    if args.software:
        software_list = [s.strip() for s in args.software.split(",")]
        checker.print_report(software_list)
    elif args.check_requirements:
        print(f"Checking {args.check_requirements}...")
        # Parse requirements file
        software_list = []
        with open(args.check_requirements) as f:
            for line in f:
                if line.strip() and not line.startswith("#"):
                    pkg = line.split("=")[0].split("[")[0].strip()
                    software_list.append(pkg)
        checker.print_report(software_list)
    else:
        # Demo mode
        print("Demo mode - checking common bioinformatics tools:")
        checker.print_report(["samtools", "bwa", "bedtools", "star", "kallisto"])


if __name__ == "__main__":
    main()


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)