PROVENANCE.md 15 KB
Package Provenance & Redistribution Terms
This document records the provenance, licensing, and redistribution terms for the
full-stack-skills collection, so downstream consumers and directory reviewers can
audit it without guesswork.
Last updated: 2026-09-11
1. Collection structure
The collection is not a single monolithic repository. It is composed of:
| Layer | Location | Contents |
|---|---|---|
| Hub | github.com/partme-ai/full-stack-skills |
Catalog, docs, platform guide. No skill code. |
| Packages | github.com/full-stack-skills/<package> |
47 independently versioned skill packages, each its own Git repo |
| Skills | <package>/skills/<skill-name>/ |
One directory per skill, containing SKILL.md + optional references/, examples/, scripts/, assets/ |
Skills are installed individually via the standard Agent Skills mechanism:
npx skills add full-stack-skills/<package> # whole package
npx skills add full-stack-skills/<package> --skill <name> # single skill
Because installs are granular, a skill must not rely on sibling skills being present.
2. Licensing layers
Licensing is three-tiered. The applicable license for a given skill is the most specific one that applies:
| Tier | Scope | License |
|---|---|---|
| Hub | partme-ai/full-stack-skills |
Apache-2.0 (see LICENSE) |
| Package | Each full-stack-skills/<package> repo |
Apache-2.0 (each repo's LICENSE) |
| Skill | <package>/skills/<skill>/LICENSE.txt |
Apache-2.0 or an exception listed in §3 |
Third-party components embedded in this collection (fonts, libraries, bundled media)
are attributed in THIRD-PARTY-NOTICES.md.
Important: a package-level Apache-2.0 declaration covers the package's own content. Individual skills that derive from third-party projects retain their original license — see §3. Downstream redistributors should preserve the per-skill
LICENSE.txtfiles intact.
3. Skill-level license exceptions
Most of the 671 skills in the collection are Apache-2.0. The following skills carry a different license and must be treated accordingly.
3.1 Upstream-derived skills (content copied or adapted from other projects)
A subset of skills reproduce, or are closely adapted from, skills published by other
projects. Each such skill carries a LICENSE.txt in its own directory and a
来源声明 / source note at the top of its SKILL.md. The applicable licence is
the upstream one — not the package's Apache-2.0.
| Package | Skills | Upstream source | Upstream license | Copyright |
|---|---|---|---|---|
speckit-skills |
9 skills (analyze, checklist, clarify, constitution, implement, plan, specify, tasks, taskstoissues) |
github/spec-kit |
MIT | Copyright GitHub, Inc. |
python-skills |
16 skills (python-type-safety, python-testing-patterns, architecture-patterns, python-observability, python-code-style, python-anti-patterns, python-error-handling, python-background-jobs, python-resource-management, python-project-structure, python-configuration, python-resilience, python-performance-optimization, python-packaging, fastapi-templates, python-design-patterns) |
wshobson/agents |
MIT | Copyright (c) 2024 Seth Hobson |
devops-skills |
spark-optimization |
wshobson/agents |
MIT | Copyright (c) 2024 Seth Hobson |
stitch-skills |
stitch-design-md, stitch-ui-prompt-architect |
google-labs-code/stitch-skills |
Apache-2.0 | Google LLC and contributors |
agent-skills |
browser-trace |
browserbase/skills |
MIT | Copyright (c) 2026 Browserbase, Inc. |
Note on speckit-skills (2026-09-11): an earlier revision of the 10
speckit-* skills was found to be near-verbatim identical to a third-party packaging
of the same prompts that is published under AGPL-3.0. Because the content originates
with github/spec-kit (MIT), those skills were regenerated directly from the MIT
upstream rather than from the AGPL-3.0 packaging. The current text matches the MIT
source at 0.96–0.99 similarity and carries the MIT notice. speckit-baseline has no
official Spec Kit counterpart, so its analysis workflow was rewritten as first-party
content that reuses only the (MIT) spec-structure conventions.
Redistribution: for these skills, preserve the LICENSE.txt and the source note
in any copy or substantial portion. Where the upstream license is MIT, that means
carrying the copyright notice and permission text. Where it is Apache-2.0, that means
carrying the license text and stating any modifications (this project adapts and
integrates the upstream content).
3.2 Third-party MIT skills (retain original copyright)
These skills were authored by or derived from third-party projects and are distributed under their original MIT license. Their copyright notices must be preserved.
| Package | Skill | Copyright holder | License |
|---|---|---|---|
agent-skills |
browser-trace |
Browserbase, Inc. | MIT |
agent-skills |
codebase-design |
Matt Pocock | MIT |
agent-skills |
caveman |
Julius Brussee | MIT |
build-skills |
rspack |
Bytedance Inc and its affiliates | MIT |
cocos-skills |
cocos2d-x |
(see skill LICENSE.txt) |
MIT |
3.3 First-party MIT skills (PartMe.AI authored)
These skills are authored by PartMe.AI but carry an MIT (rather than Apache-2.0) skill-level license. This is an internal inconsistency, not a third-party claim.
| Package | Skills |
|---|---|
uniapp-skills |
uniapp-ad, uniapp-cloud, uniapp-mini, uniapp-native-app, uniapp-native-plugin, uniapp-plugin, uniapp-project, uniappx-project (8 skills, © 2024 partme-ai, MIT) |
3.4 Pointer-style declarations
12 skills carry a short pointer rather than the full license text. They are
Apache-2.0 by intent; the pointer refers to the package-level LICENSE:
pencil-skills/skills/pencil-design-from-stitch-html—Apache-2.0. See repository LICENSE.stitch-skills/skills/stitch-*— 10 skills, same wordingagent-skills/skills/skill-trace-evaluation,skill-official-evaluation—Apache-2.0
3.5 Skills whose content documents third-party tools
Many skills (e.g. openspec-skills/*, nvm-skills/*,
document-skills/markitdown-*) document how to use third-party tools and
services. The skill text is first-party; the referenced tools belong to their
respective owners:
| Skill group | Third-party tool referenced | Tool's license |
|---|---|---|
speckit-skills |
GitHub spec-kit | MIT |
openspec-skills |
OpenSpec | see upstream project |
nvm-skills |
nvm (based on the official README) |
MIT |
document-skills/markitdown-* |
Microsoft MarkItDown | MIT |
firmware-skills |
OpenWrt / ophub Amlogic builds, ESP-IDF | see upstream projects |
These skills do not copy upstream source code; they provide original guidance and link to the upstream documentation as the source of truth.
4. Package inventory
47 packages, 671 skills. Each is an independent repository under the
full-stack-skills GitHub organization.
| Package | Skills | License | Repo |
|---|---|---|---|
agent-skills |
15 | Apache-2.0 (1 MIT-derived §3.1; 3 MIT §3.2; 2 pointer §3.4) | ↗ |
angular-skills |
1 | Apache-2.0 | ↗ |
antd-skills |
4 | Apache-2.0 | ↗ |
ascii-skills |
13 | Apache-2.0 | ↗ |
avue-skills |
3 | Apache-2.0 | ↗ |
build-skills |
7 | Apache-2.0 (1 MIT skill, §3.2) | ↗ |
chart-skills |
2 | Apache-2.0 | ↗ |
cocos-skills |
1 | Apache-2.0 (1 MIT skill, §3.2) | ↗ |
database-skills |
5 | Apache-2.0 | ↗ |
ddd-skills |
16 | Apache-2.0 | ↗ |
ddd4j-skills |
62 | Apache-2.0 | ↗ |
design-skills |
9 | Apache-2.0 | ↗ |
devops-skills |
10 | Apache-2.0 (1 MIT-derived skill, §3.1) | ↗ |
docker-skills |
16 | Apache-2.0 | ↗ |
document-skills |
11 | Apache-2.0 (3 MIT skills, §3.5) | ↗ |
drawio-skills |
2 | Apache-2.0 | ↗ |
electron-skills |
3 | Apache-2.0 | ↗ |
firmware-skills |
20 | Apache-2.0 | ↗ |
flutter-skills |
2 | Apache-2.0 | ↗ |
go-skills |
2 | Apache-2.0 | ↗ |
java-skills |
39 | Apache-2.0 | ↗ |
kotlin-skills |
7 | Apache-2.0 | ↗ |
nodejs-skills |
4 | Apache-2.0 | ↗ |
nvm-skills |
15 | Apache-2.0 | ↗ |
ocrmypdf-skills |
5 | Apache-2.0 | ↗ |
openspec-skills |
15 | Apache-2.0 | ↗ |
pencil-skills |
28 | Apache-2.0 (§3.4 pointer) | ↗ |
python-skills |
19 | Apache-2.0 (16 MIT-derived skills, §3.1) | ↗ |
react-skills |
7 | Apache-2.0 | ↗ |
rust-skills |
29 | Apache-2.0 | ↗ |
social-skills |
2 | Apache-2.0 | ↗ |
speckit-skills |
13 | Apache-2.0 (10 MIT-derived skills, §3.1) | ↗ |
spring-skills |
7 | Apache-2.0 | ↗ |
stitch-skills |
29 | Apache-2.0 (2 Apache-2.0-derived §3.1; 10 pointer §3.4) | ↗ |
svelte-skills |
16 | Apache-2.0 | ↗ |
swift-skills |
7 | Apache-2.0 | ↗ |
t2ui-skills |
97 | Apache-2.0 | ↗ |
tauri-skills |
52 | Apache-2.0 | ↗ |
teaching-skills |
3 | Apache-2.0 | ↗ |
testing-skills |
10 | Apache-2.0 | ↗ |
threejs-skills |
18 | Apache-2.0 | ↗ |
uniapp-skills |
13 | Apache-2.0 (8 MIT skills, §3.3) | ↗ |
uview-skills |
2 | Apache-2.0 | ↗ |
vscode-skills |
4 | Apache-2.0 | ↗ |
vue-skills |
7 | Apache-2.0 | ↗ |
vue-ui-skills |
4 | Apache-2.0 | ↗ |
zig-skills |
15 | Apache-2.0 | ↗ |
5. Redistribution
- Apache-2.0 content may be redistributed under Apache-2.0 terms. Preserve
LICENSEandNOTICE-style attributions. - MIT content (§3.1, §3.2) may be redistributed under MIT terms. The copyright notice and permission notice must be included in all copies or substantial portions.
- Bundled third-party material is attributed in
THIRD-PARTY-NOTICES.md. Redistributors should carry that file forward. - No warranty: skills are provided "AS IS", without warranty of any kind, as set out in the applicable license.
6. How to audit this yourself
# Clone a package and inspect its license
git clone https://github.com/full-stack-skills/<package>.git
cat <package>/LICENSE # package-level license
# Find skills with a non-default license
grep -r '^license:' <package>/skills/*/SKILL.md | grep -v 'Apache' | grep -v 'LICENSE.txt'
# Inspect a specific skill's license text
cat <package>/skills/<skill>/LICENSE.txt
Skill frontmatter declares the license with a license: field; when it reads
Complete terms in LICENSE.txt, the authoritative text is the LICENSE.txt file
in the same skill directory.
7. Known gaps
Tracked openly so reviewers do not have to discover them independently:
| Item | Status |
|---|---|
Package-level LICENSE files across 41 packages contained third-party notices rather than an Apache-2.0 grant |
Fixed 2026-09-11 — split into LICENSE (Apache-2.0) + THIRD-PARTY-NOTICES.md |
firmware-skills, zig-skills had no LICENSE file |
Fixed 2026-09-11 — Apache-2.0 added |
vue-skills/skills/pinia/LICENSE.txt contained a 404: Not Found fetch artifact |
Fixed 2026-09-11 — replaced with Apache-2.0 text |
17 upstream-derived skills (python-skills ×16, devops-skills ×1) carried no upstream attribution, violating the MIT notice requirement |
Fixed 2026-09-11 — per-skill LICENSE.txt + source note added (§3.1) |
2 stitch-skills skills reproduced Apache-2.0 upstream text without attribution |
Fixed 2026-09-11 — per-skill LICENSE.txt + source note added (§3.1) |
10 speckit-skills skills were near-verbatim from an AGPL-3.0 third-party packaging |
Fixed 2026-09-11 — regenerated from the MIT upstream github/spec-kit (§3.1) |
| READMEs stated "460+ skills / 42 packages" | Fixed 2026-09-11 — corrected to 671 skills / 47 packages |
| 8 first-party skills carry MIT instead of Apache-2.0 (§3.3) | Open — internal inconsistency; both are permissive |
| 12 skills use pointer-style license declarations (§3.4) | Open — intentional brevity; points to package LICENSE |
8. Contact
Provenance questions, corrections, or additional audit requests:
open an issue at partme-ai/full-stack-skills/issues.