Software License Manager

Audit, track, and optimize your organization's software licenses by identifying waste, compliance risks, and managing a renewal calendar with alerts.

Security Scan

The skill is a high-level audit framework that claims broad, organization-wide data collection but provides no guidance or declared requirements for the credentials and data sources needed to actually perform that work, which is an incoherence users should understand before installing or running it.

Purpose & Capability

The name/description promise a full org-wide license audit (inventory, DAU/MAU, seat counts, renewal automation). However, the skill declares no required credentials, config paths, or binaries. Realizing these features legitimately requires access to many external systems (SaaS admin consoles, billing exports, SSO/IDP logs, MDM, source code repos, cloud billing APIs). The absence of any declared access requirements is a mismatch: this appears to be a playbook/framework rather than an automated connector.

Instruction Scope

SKILL.md provides thorough frameworks, templates, and recommended analyses but contains no concrete, bounded runtime instructions for where or how to collect inventory and usage data. It does not explicitly tell the agent to read particular files or call specific APIs, nor does it warn against reading unrelated sensitive files. Because it asks for DAU/MAU, ghost-seat detection, and OSS license scanning, an agent following these instructions could reasonably seek access to admin consoles, repos, billing data, or logs — but the skill does not specify safe, minimal data sources or required permission levels.

Install Mechanism

Instruction-only skill with no install spec and no bundled code files. Nothing will be written to disk by the skill package itself, which reduces direct supply-chain risk.

Credentials

The skill declares no environment variables or credentials, yet the claimed capabilities normally require multiple sensitive credentials (SaaS admin keys, cloud billing read access, SSO/IDP logs, repo read access). The lack of explicit credential requirements is disproportionate to the claimed functionality and could mislead users into thinking it can run without granting access — in practice you would need to provide several high-privilege tokens to get accurate results.

Persistence & Privilege

No 'always' flag, no install hooks, and no config paths requested. The skill does not ask to persist itself or modify other skills. Autonomous invocation is allowed by default but is not combined with other red flags here.

What to consider before installing

This skill reads like a strong human-facing audit playbook and templates rather than an automated connector. It does not include code or installers, so installing it does not by itself grant access to anything — however, to actually perform the audits described you or your agent will need to supply many sensitive data sources (SaaS admin APIs, cloud billing, SSO/IDP logs, repo access, MDM). Before running: (1) treat this as a manual framework unless you intentionally provide connectors; (2) never hand over full admin keys — use least-privilege, read-only API tokens or scoped audit credentials; (3) explicitly document which systems the agent will query and get approval from owners; (4) test on a limited subset or a staging account first; (5) be cautious about following external links/prompts that ask you to pay or supply credentials (the README links to paid AfrexAI context packs). If you want automated scans, prefer a skill that declares the exact connectors it uses and the minimum permissions required.

Audit, track, and optimize your organization's software licenses. Finds waste, flags compliance risks, and builds a renewal calendar.

What It Does

1. License Inventory Audit — Catalog every SaaS subscription, perpetual license, and open-source dependency across the org
2. Waste Detection — Flag unused seats, duplicate tools, and zombie subscriptions burning cash
3. Compliance Risk Scanner — Identify expired licenses, exceeded seat counts, and audit-risky gaps
4. Renewal Calendar — Build a 12-month renewal timeline with 60/30/15-day alerts
5. Negotiation Prep — Generate vendor scorecards with usage data, alternatives, and leverage points
6. Cost Optimization Report — Recommend downgrades, consolidations, and tier changes with projected savings

How to Use

Tell the agent what you need:

• "Audit our software licenses" → full inventory + waste report
• "Find unused SaaS subscriptions" → waste detection with savings estimate
• "Build a license renewal calendar" → 12-month timeline with alerts
• "We're renewing Salesforce — prep negotiation" → vendor scorecard + leverage analysis
• "Check our open-source license compliance" → dependency scan for GPL/AGPL risks

Audit Framework

License Categories

Category	Examples	Risk Level
SaaS Subscriptions	Salesforce, HubSpot, Slack, Zoom	Medium — auto-renews silently
Perpetual Licenses	Microsoft Office, Adobe CS6	Low — but may lack support
Usage-Based	AWS, Twilio, Stripe	High — unpredictable costs
Open Source	GPL, MIT, Apache, AGPL	Compliance risk if commercial
Enterprise Agreements	Microsoft EA, Oracle ULA	High — complex true-ups

Waste Indicators

• Ghost seats: Licensed users who haven't logged in 60+ days
• Duplicate tools: Multiple tools serving same function (e.g., Zoom + Teams + Meet)
• Tier bloat: Enterprise tier when Standard covers actual usage
• Orphan licenses: Departed employees still consuming seats
• Shelf software: Purchased but never deployed

Compliance Red Flags

• Seat count exceeds license agreement
• Using software past license expiration
• GPL/AGPL code in proprietary products without disclosure
• Non-commercial licenses used commercially
• Unlicensed copies on employee machines

Renewal Calendar Template

| Vendor | Product | Annual Cost | Renewal Date | Alert Date | Action |
|--------|---------|-------------|-------------- |------------|--------|
| [Name] | [Product] | $XX,XXX | YYYY-MM-DD | 60 days prior | Review/Negotiate/Cancel |

Negotiation Prep Scorecard

For each renewal:

1. Current spend — annual + per-seat breakdown
2. Actual usage — DAU/MAU, feature adoption rate
3. Alternatives — 2-3 competitors with pricing
4. Leverage points — multi-year discount, volume pricing, competitor quotes
5. Walk-away price — your BATNA if vendor won't budge
6. Timing — best: 90 days before renewal, negotiate with fiscal year pressure

Cost Optimization Playbook

Quick Wins (Week 1)

• Remove departed employee seats → typical savings: 8-15% of SaaS spend
• Cancel unused trials and forgotten subscriptions
• Downgrade over-provisioned tiers

Medium Term (Month 1-3)

• Consolidate duplicate tools (pick one, migrate)
• Renegotiate top 5 vendors by spend
• Implement approval workflow for new subscriptions

Strategic (Quarter 1-2)

• Enterprise agreement consolidation
• Annual vs monthly billing optimization (typically 15-20% discount)
• Build internal tool alternatives for simple SaaS

Industry Benchmarks

• Average company wastes 25-30% of SaaS spend on unused or underused licenses
• Companies with 100+ employees average 130+ SaaS tools (most don't know exact count)
• License audit typically recovers $1,000-$3,000 per employee per year
• Open-source compliance violation fines: $100K-$5M+ depending on jurisdiction

Output Formats

• Executive Summary — 1-page waste + risk + savings overview
• Detailed Audit Report — full inventory with status, usage, recommendations
• Renewal Calendar — spreadsheet-ready timeline
• Vendor Scorecard — per-vendor negotiation brief
• Compliance Report — risk register with remediation steps

---

Go Deeper

This skill handles the audit and optimization framework. For full industry-specific automation contexts:

🔗 AfrexAI Context Packs — $47 per industry. SaaS, Fintech, Healthcare, Legal, and 7 more verticals with complete agent configurations.

🔗 AI Revenue Calculator — Find out how much your org is losing to manual processes.

🔗 Agent Setup Wizard — Configure your AI agent stack in minutes.