semaphore-third-party-licenses
semaphore-third-party-licenses is a Secrets & supply chain skill for AI agents, published by semaphoreui in the semaphore repository on GitHub. Skillspace rates semaphore-third-party-licenses C (72/100) and it passed the safety scan; a judge model has also reviewed it.
Generate or update the THIRD-PARTY-LICENSES.md file for the Semaphore UI repository. Use this skill whenever the user asks to create, update, regenerate, audit, or refresh third-party license attributions, OSS notices, SBOM-style license inventories, or NOTICE files for Semaphore UI. Trigger on phrases like "third-party licenses", "OSS notices", "license attribution file", "SBOM for licenses", "NOTICE file", "audit dependencies", "licenses for go.mod / package.json", or any request that mentions compliance with customer agreements requiring an OSS components list. Also trigger when the user says "we added a new dependency, regenerate licenses". This skill knows the Semaphore UI layout (Go backend + Vue.js frontend), the project's license policy (allowlist/denylist), and the canonical output format.
- Grade
- C
- Quality
- 72 / 100
- Safety
- Passed
- GitHub stars
- 13,892
Placed #3 of 6 in the judged category final for Secrets & supply chain.
Not launch-quality. It is graded C with a clean safety verdict, but our quality filters exclude it: a model that read it found it written only for the repository it lives in. So it is not in our launch-quality set, the skills our MCP server searches and recommends. How launch-quality is decided
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 84 / 100
- Maturity
- Structured: ships references or scripts
- Security scan
- No issues found
- License
- MIT
- Adoption
- Adopted by 0 other repositories, in 0 collections
- Scope
- Repo-internal: written for the repository it lives in. Generates this specific repo's own THIRD-PARTY-LICENSES.md file.
Judge review
Placed #3 of 6 in the judged category final for Secrets & supply chain.
- Trigger
78 78 - Instructions
90 90 - Specificity
90 90 - Safety
92 92 - Disclosure
85 85 - Maintenance
85 85
A concrete allow/review/forbidden license gate with real SPDX categories and a hard stop on GPL/AGPL/SSPL that blocks generation until the user decides, backed by named scripts for each stage.
Not checked yet
- No blind task eval yet
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.