Build a reusable Agent Skill that checks licensing before installation

Focus: Agents for Everyone
Date: October 10, 2026
Topics: Agent Skills, License provenance, Approval workflows
Evidence: Publisher Authored
Availability: Available

A read-only license state machine checks a source URL, immutable commit, frontmatter, repository license and requested tool scope; it normalizes SPDX terms, sends ambiguity to review and contradictions to rejection, and opens installation only after human-approved acceptance.

Summary: SkillMD's October 10 survey found 901,653 of 1,081,266 indexed public SKILL.md files without a license field in frontmatter. The survey did not examine repository licenses, so absence is not proof of no license. A practical read-only review Skill can check source commits, normalize SPDX terms, inspect repository licenses and halt on ambiguity before installation.

Why it matters: Copying an appealing Skill into a work project may import unclear redistribution rights or unsafe instructions. Require provenance, license evidence, allowed tool scope and an explicit approval record before executing unfamiliar procedures; treat ambiguous cases as review required.

Source: 83% of Agent Skills have no license

How useful was this?

Anonymous feedback. No name or email collected.

← Daily Brief for October 14, 2026