Dependency Auditor
alirezarezvani/claude-skills
Audit and manage dependencies across multi-language projects.
A skill your agent uses when the user says 'licensing', 'license audit', 'can I use this commercially', 'OSS license check', 'license compatibility', 'GPL', 'MIT', 'AGPL', 'copyleft'.
$ npx skills add cwinvestments/memstack --skill memstack-business-licensing -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install cwinvestments/memstack memstack-business-licensing --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/cwinvestments/memstack.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/business/licensing .claude/skills/memstack-business-licensing && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "memstack-business-licensing" agent skill from https://github.com/cwinvestments/memstack/tree/master/skills/business/licensing into .claude/skills/memstack-business-licensing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "memstack-business-licensing", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/cwinvestments/memstack/tree/master/skills/business/licensingType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add cwinvestments/memstack --skill memstack-business-licensing -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install cwinvestments/memstack memstack-business-licensing --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cwinvestments/memstack.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/business/licensing .agents/skills/memstack-business-licensing && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "memstack-business-licensing" agent skill from https://github.com/cwinvestments/memstack/tree/master/skills/business/licensing into .agents/skills/memstack-business-licensing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "memstack-business-licensing", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cwinvestments/memstack --skill memstack-business-licensing -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install cwinvestments/memstack memstack-business-licensing --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cwinvestments/memstack.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/business/licensing .cursor/skills/memstack-business-licensing && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "memstack-business-licensing" agent skill from https://github.com/cwinvestments/memstack/tree/master/skills/business/licensing into .cursor/skills/memstack-business-licensing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "memstack-business-licensing", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/cwinvestments/memstack.git --path skills/business/licensing--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add cwinvestments/memstack --skill memstack-business-licensing -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install cwinvestments/memstack memstack-business-licensing --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cwinvestments/memstack.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/business/licensing .gemini/skills/memstack-business-licensing && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "memstack-business-licensing" agent skill from https://github.com/cwinvestments/memstack/tree/master/skills/business/licensing into .gemini/skills/memstack-business-licensing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "memstack-business-licensing", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install cwinvestments/memstack memstack-business-licensingInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add cwinvestments/memstack --skill memstack-business-licensing -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/cwinvestments/memstack.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/business/licensing .github/skills/memstack-business-licensing && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "memstack-business-licensing" agent skill from https://github.com/cwinvestments/memstack/tree/master/skills/business/licensing into .github/skills/memstack-business-licensing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "memstack-business-licensing", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cwinvestments/memstack --skill memstack-business-licensing -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install cwinvestments/memstack memstack-business-licensing --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cwinvestments/memstack.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/business/licensing .opencode/skills/memstack-business-licensing && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "memstack-business-licensing" agent skill from https://github.com/cwinvestments/memstack/tree/master/skills/business/licensing into .opencode/skills/memstack-business-licensing/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "memstack-business-licensing", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
memstack-business-licensingA skill your agent uses when the user says 'licensing', 'license audit', 'can I use this commercially', 'OSS license check', 'license compatibility', 'GPL', 'MIT', 'AGPL', 'copyleft'.
Memstack Business Licensing is an agent skill from cwinvestments/memstack. Use this skill when the user says 'licensing', 'license audit', 'can I use this commercially', 'OSS license check', 'license compatibility', 'GPL', 'MIT', 'AGPL', 'copyleft'. Scans the repository for every dependency and asset license, then produces a per-package verdict table: ready for commercial use, citation/attribution required, more information needed, or commercial use not allowed. Do NOT use for vulnerability scanning (use dependency-audit) or contract drafting (use contract-template).
Its SKILL.md is about 3.5k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Legal & Compliance, covering Regulatory compliance, Contract review and Vulnerability scanning. The repository describes itself as: Structured skill framework for Claude Code. 130 skills, persistent memory, TokenStack compression, localhost dashboard with 3-agent runner, real-time streaming, MCP tools.
8 steps, taken from the step headings in SKILL.md.
Read from SKILL.md and the folder at commit 00370ce. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
npmnpxcargomvnbundlecomposerdotnetFrom the folder's file list and the shell code blocks in SKILL.md.
Hosts in commands or code, which the agent is likely to contact:
github.comFrom URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Memstack Business Licensing loads about 3.5k tokens when it runs. Until then it costs about 132 tokens; SKILL.md has 1,138 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
Its licence (Proprietary) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,138 words (~3,542 tokens).
“Scans a repository for every license that touches the product (deps, vendored code, fonts, assets), then produces a per-package verdict table marking each as Ready, Citation Required, Needs Info, or Not Allowed for commercial use.”
Just SKILL.md in skills/business/licensing of cwinvestments/memstack.
Open the folder on GitHubat commit 00370ce
Memstack Business Licensing next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Memstack Business Licensing this skillcwinvestments/memstack | 423 | — | ~3.5k | Automated safety check: Pass | Proprietary | |
| Dependency Auditoralirezarezvani/claude-skills | 28k | — | ~1.1k | Automated safety check: Pass | MIT | |
| Iflytek Contract Intelligence Reviewiflytek/iFly-Skills | 209 | — | ~773 | Automated safety check: Pass | Apache-2.0 | |
| Performing Sca Dependency Scanning With Snykmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.2k | Automated safety check: Pass | Apache-2.0 | |
| Gc Reviewalirezarezvani/claude-skills | 28k | — | ~1.2k | Automated safety check: Pass | MIT | |
| Codebase Cleanup Deps Auditaiskillstore/marketplace | 433 | 7 repos | ~490 | Automated safety check: Pass | None |
alirezarezvani/claude-skills
Audit and manage dependencies across multi-language projects.
iflytek/iFly-Skills
A skill your agent uses when user asks to review contracts, detect contract risks, or perform compliance checks.
mukul975/Anthropic-Cybersecurity-Skills
This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source dependencies in CI/CD pipelines.
alirezarezvani/claude-skills
/cs:gc-review <plan — General Counsel interrogation of contracts, IP, regulatory, term sheets, and employment-law surface.
aiskillstore/marketplace
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security.
rlaope/oh-my-hermes
[omh] Business contract, NDA, or policy with legal risk: surface contract and compliance risks, questions, and escalation points before a legal decision or action.
cwinvestments/memstack
A skill your agent uses when the user says 'SEO audit', 'site audit', 'check SEO', 'audit my site', 'SEO check', 'technical SEO', or is evaluating a website's search engine optimization health, meta…
cwinvestments/memstack
A skill your agent uses when the user says 'add schema', 'schema markup', 'JSON-LD', 'structured data', 'rich results', 'rich snippets', or is adding or fixing schema.org structured data for better…
cwinvestments/memstack
A skill your agent uses when the user says 'tokenstack', 'compression', 'token savings', 'proxy status', or asks about context window usage.
cwinvestments/memstack
A skill your agent uses when the user says 'save diary', 'log session', 'wrapping up', or at end of a productive session.
cwinvestments/memstack
A skill your agent uses when the user references past sessions, asks 'what did we do', 'do you remember', 'last session', 'recall', or 'continue from'.
cwinvestments/memstack
A skill your agent uses when the user says 'dispatch', 'send familiar', 'split task', or needs work split across parallel CC sessions.
Categories
A skill your agent uses when the user says 'licensing', 'license audit', 'can I use this commercially', 'OSS license check', 'license compatibility', 'GPL', 'MIT', 'AGPL', 'copyleft'. Memstack Business Licensing is an agent skill from cwinvestments/memstack. Use this skill when the user says 'licensing', 'license audit', 'can I use this commercially', 'OSS license check', 'license compatibility', 'GPL', 'MIT', 'AGPL', 'copyleft'.
Memstack Business Licensing fits situations like: the user says licensing; can I use this commercially; OSS license check; license compatibility.
Run `npx skills add cwinvestments/memstack --skill memstack-business-licensing -a claude-code`. Or copy the skill folder (skills/business/licensing in cwinvestments/memstack) into .claude/skills/memstack-business-licensing in your project. Claude Code loads it when a task matches its description.
Run `npx skills add cwinvestments/memstack --skill memstack-business-licensing -a codex`. Or copy the skill folder (skills/business/licensing in cwinvestments/memstack) into .agents/skills/memstack-business-licensing in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cwinvestments/memstack --skill memstack-business-licensing -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/memstack-business-licensing, .gemini/skills/memstack-business-licensing, .github/skills/memstack-business-licensing and .opencode/skills/memstack-business-licensing in your project.
Going by SKILL.md and its folder, Memstack Business Licensing needs the command-line tools its instructions call (npm, npx, cargo, mvn, bundle and composer). Our summary lists: Python 3; Node.js.
SKILL.md names 1 domain. In commands or code: github.com; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Memstack Business Licensing carries a proprietary licence (declared in SKILL.md). It is published on GitHub, but it is not open source: read the licence file before using or sharing it.
About 3.5k tokens (SKILL.md is roughly 14k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Memstack Business Licensing: Dependency Auditor (alirezarezvani/claude-skills, 28k stars), Iflytek Contract Intelligence Review (iflytek/iFly-Skills, 209 stars), Performing Sca Dependency Scanning With Snyk (mukul975/Anthropic-Cybersecurity-Skills, 34k stars) and Gc Review (alirezarezvani/claude-skills, 28k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
cwinvestments (a GitHub user) maintains it in cwinvestments/memstack, which has 423 GitHub stars. The repository holds 87 skills in this directory. The repository was last updated on September 26, 2026.
Source: cwinvestments/memstack on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.