Validate or fix LGPL-2.1-only headers, apply approved copyright provenance, and prepare provenance audits for renamed, split, copied, or extracted first-party code.
$ npx skills add TotalCross/totalcross --skill validate-headers -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install TotalCross/totalcross validate-headers --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/TotalCross/totalcross.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/validate-headers .claude/skills/validate-headers && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "validate-headers" agent skill from https://github.com/TotalCross/totalcross/tree/master/.agents/skills/validate-headers into .claude/skills/validate-headers/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "validate-headers", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/TotalCross/totalcross/tree/master/.agents/skills/validate-headersType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add TotalCross/totalcross --skill validate-headers -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install TotalCross/totalcross validate-headers --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/TotalCross/totalcross.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/validate-headers .agents/skills/validate-headers && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "validate-headers" agent skill from https://github.com/TotalCross/totalcross/tree/master/.agents/skills/validate-headers into .agents/skills/validate-headers/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "validate-headers", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add TotalCross/totalcross --skill validate-headers -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install TotalCross/totalcross validate-headers --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/TotalCross/totalcross.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/validate-headers .cursor/skills/validate-headers && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "validate-headers" agent skill from https://github.com/TotalCross/totalcross/tree/master/.agents/skills/validate-headers into .cursor/skills/validate-headers/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "validate-headers", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/TotalCross/totalcross.git --path .agents/skills/validate-headers--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add TotalCross/totalcross --skill validate-headers -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install TotalCross/totalcross validate-headers --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/TotalCross/totalcross.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/validate-headers .gemini/skills/validate-headers && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "validate-headers" agent skill from https://github.com/TotalCross/totalcross/tree/master/.agents/skills/validate-headers into .gemini/skills/validate-headers/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "validate-headers", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install TotalCross/totalcross validate-headersInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add TotalCross/totalcross --skill validate-headers -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/TotalCross/totalcross.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/validate-headers .github/skills/validate-headers && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "validate-headers" agent skill from https://github.com/TotalCross/totalcross/tree/master/.agents/skills/validate-headers into .github/skills/validate-headers/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "validate-headers", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add TotalCross/totalcross --skill validate-headers -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install TotalCross/totalcross validate-headers --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/TotalCross/totalcross.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/validate-headers .opencode/skills/validate-headers && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "validate-headers" agent skill from https://github.com/TotalCross/totalcross/tree/master/.agents/skills/validate-headers into .opencode/skills/validate-headers/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "validate-headers", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
validate-headersValidate or fix LGPL-2.1-only headers, apply approved copyright provenance, and prepare provenance audits for renamed, split, copied, or extracted first-party code.
Validate Headers is an agent skill from TotalCross/totalcross. Validate or fix LGPL-2.1-only headers, apply approved copyright provenance, and prepare provenance audits for renamed, split, copied, or extracted first-party code.
Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Development, covering Embedded systems. It works with Java and Linux. The repository describes itself as: TotalCross is a Software Development Kit that helps cross platform application development. Currently supported platforms are: Windows, Wince, Android, iOS, Linux and Linux ARM…
6 steps, taken from the step headings in SKILL.md.
Read from SKILL.md and the folder at commit 34cc7ee. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
python3gitFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md. Its commands use git, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Validate Headers loads about 1.1k tokens when it runs. Until then it costs about 45 tokens; SKILL.md has 451 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from TotalCross/totalcross at commit 34cc7ee, republished under its LGPL-2.1 licence (© TotalCross). 451 words, ~1,074 tokens.
.claude/skills/validate-headers/SKILL.md (or your agent's skills folder).Use the repository tools from the repository root. The validator is the source of truth; do not derive a header from the current pathname when an approved active provenance audit applies.
Avoid dumping a noisy worktree. Prefer:
git diff --name-only --diff-filter=ACMR --cached -- <task paths>When nothing is staged:
git diff --name-only --diff-filter=ACMR -- <task paths>Do not add repository headers to upstream, vendored, generated, or exempt files
merely to make validation pass. Respect the exclusions implemented by
scripts/validate-copyright-headers.sh and documented in AGENTS.md.
Generated evidence under legal/copyright-provenance/audits/ is intentionally
excluded from ordinary header validation.
For explicit files:
python3 scripts/validate-copyright-headers.sh --files <changed files>For staged changes, omit --files; when nothing is staged, the validator uses
the working-tree diff:
python3 scripts/validate-copyright-headers.shThe validator also accepts:
python3 scripts/validate-copyright-headers.sh --commit <commit>
python3 scripts/validate-copyright-headers.sh <base> <head>Approved manifests listed in
legal/copyright-provenance/active-audits.json take precedence over Git
pathname creation dates. For covered files, the validator checks the code
fingerprint and historical source before validating the inherited header. Treat
a stale-audit error as a request for a new audit; never bypass it with a
current-year-only header.
Use the validator instead of manually reconstructing ranges:
python3 scripts/validate-copyright-headers.sh \
--fix --files <changed files>New first-party files normally use the current-year Amalgam header. Existing files preserve the applicable SuperWaba, TotalCross, and Amalgam ranges. Provenance-backed files inherit the chain from the approved audit.
After fixing, rerun the focused validation and:
git diff --check -- <task paths>Create an audit when a refactor renames, splits, merges, copies, or extracts substantial code and the destination pathname no longer represents the source history:
python3 legal/copyright-provenance/audit-code-provenance.py \
<initial-commit> <final-commit> [source-path]Omit source-path for automatic source discovery. Review summary.md and the
per-source reports. Confirm that final targets are real descendants, unrelated
generic code is absent, and intermediate deleted paths appear only as lineage
evidence.
Do not edit generated evidence or reports to alter the conclusion. Correct the audit tool and run a new audit when the result is wrong.
Audit review is a maintainer operation:
python3 legal/copyright-provenance/review-audit.py <audit-id>The command asks whether to approve, reject, or cancel. Approval can optionally
append the manifest to active-audits.json without removing existing entries.
When activated, it verifies the audit tool hash and covered code fingerprints,
fixes the covered headers, runs validation, stages only the audit-related
changes, and creates one signed atomic commit.
Because the review command can stage and commit, do not run it unless the user
explicitly requested the review and authorized the resulting commit. Do not
manually mark a manifest approved or edit active-audits.json as a substitute
for this workflow.
Report:
review-audit.py, when explicitly authorized.Do not paste full generated reports or broad validator output. Show only the relevant errors and paths.
© TotalCross, LGPL-2.1. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in .agents/skills/validate-headers of TotalCross/totalcross.
Open the folder on GitHubat commit 34cc7ee
Validate Headers next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Validate Headers this skillTotalCross/totalcross | 227 | — | ~1.1k | Automated safety check: Pass | LGPL-2.1 | |
| Simulink Configure Real Time Targetmatlab/simulink-agentic-toolkit | 1.2k | — | ~4.8k | Automated safety check: Notes | Custom licence | |
| Flash IdfLeoKemp223/embed-ai-tool | 984 | — | ~581 | Automated safety check: Notes | None | |
| Docker Jfr Benchmark Loopeclipse-rdf4j/rdf4j | 420 | — | ~945 | Automated safety check: Pass | BSD-3-Clause | |
| Rsid SDKrealsenseai/RealSenseID | 122 | — | ~4.1k | Automated safety check: Pass | Apache-2.0 | |
| Intelliconnect Service Styleruanrongman/IntelliConnect | 147 | — | ~2.4k | Automated safety check: Pass | Apache-2.0 |
matlab/simulink-agentic-toolkit
Manage Simulink Real-Time target computers from MATLAB — list available targets, check whether a target is connected, read its lifecycle status, add/remove/rename targets, set IP addresses and…
LeoKemp223/embed-ai-tool
当需要通过 ESP-IDF 工具链烧录固件到 ESP32 系列芯片，或启动调试会话时使用. An agent skill from LeoKemp223/embed-ai-tool.
eclipse-rdf4j/rdf4j
Run a repeatable RDF4J performance loop against one JMH benchmark in Docker with Linux Java 26 and JFR CPU-time profiling.
realsenseai/RealSenseID
RealSenseID face authentication SDK reference. An agent skill from realsenseai/RealSenseID.
ruanrongman/IntelliConnect
Create or update IntelliConnect Spring Boot service/serviceimpl code in this repository style.
lakernote/easy-postman
A skill your agent uses when adding or updating EasyPostman Swing/TestNG UI tests that may run in headless CI or no-display Linux environments.
TotalCross/totalcross
Create focused Git commits that follow this repository's validated commit-message format, with required scopes, focused validation, and preservation of unrelated local changes; invoke only when the…
Categories
Validate or fix LGPL-2.1-only headers, apply approved copyright provenance, and prepare provenance audits for renamed, split, copied, or extracted first-party code. Validate Headers is an agent skill from TotalCross/totalcross.1-only headers, apply approved copyright provenance, and prepare provenance audits for renamed, split, copied, or extracted first-party code.
Validate Headers fits situations like: tasks that involve Embedded systems.
Run `npx skills add TotalCross/totalcross --skill validate-headers -a claude-code`. Or copy the skill folder (.agents/skills/validate-headers in TotalCross/totalcross) into .claude/skills/validate-headers in your project. Claude Code loads it when a task matches its description.
Run `npx skills add TotalCross/totalcross --skill validate-headers -a codex`. Or copy the skill folder (.agents/skills/validate-headers in TotalCross/totalcross) into .agents/skills/validate-headers in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add TotalCross/totalcross --skill validate-headers -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/validate-headers, .gemini/skills/validate-headers, .github/skills/validate-headers and .opencode/skills/validate-headers in your project.
Going by SKILL.md and its folder, Validate Headers needs the command-line tools its instructions call (python3 and git). Our summary lists: Python 3.
SKILL.md contains no URLs. Its commands use git, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Validate Headers is published under the LGPL-2.1 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.1k tokens (SKILL.md is roughly 4.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Validate Headers: Simulink Configure Real Time Target (matlab/simulink-agentic-toolkit, 1.2k stars), Flash Idf (LeoKemp223/embed-ai-tool, 984 stars), Docker Jfr Benchmark Loop (eclipse-rdf4j/rdf4j, 420 stars) and Rsid SDK (realsenseai/RealSenseID, 122 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
TotalCross (a GitHub organization) maintains it in TotalCross/totalcross, which has 227 GitHub stars. The repository holds 2 skills in this directory. The repository was last updated on October 8, 2026.
Source: TotalCross/totalcross on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
