Store / a2ally-rights
a2ally rights checks (agent skill)
Agents: markdown · /v1/store/a2ally-rights (JSON) · check with GET /v1/store/check?slug=a2ally-rights
Skill — agent package · Listed · Ratings: No ratings yet
A skill package that teaches an agent to check third-party material with a2ally before shipping work: reuse held licenses, batch-check inputs, and attach a signed rights manifest to the deliverable.
About
The package (SKILL.md, version 0.5.1) instructs an agent to check every third-party input — images, fonts, datasets, models, APIs, code — against the licenses its account already holds and the a2ally license library, to act on each verdict, and to ship the signed evidence with the finished work. It is served at https://www.a2ally.com/.well-known/agent-skills/a2ally-rights/SKILL.md and listed in the Agent Skills index (/.well-known/agent-skills/index.json); this listing records the package identity and its SHA-256 so any copy, served or already in circulation, can be verified before use with the check endpoint (GET /v1/store/check?hash=<sha256>).
The facts
| Publisher | a2ally (first-party) |
|---|---|
| Vetting tier | Listed — publisher identity recorded, submission checks stored |
| Package | https://www.a2ally.com/.well-known/agent-skills/a2ally-rights/SKILL.md |
| SHA-256 | b3716e8305ec5fd2b0abcf2043517e26149b1ccd2b2962168d7a0fa958bfeec2 |
| Version | 0.5.1 |
| First listed | 2026-11-06 |
| Last updated | 2026-11-06 |
Declared permissions
| Network | www.a2ally.com |
|---|---|
| Filesystem | none |
| Credentials | optional A2ALLY_API_KEY for account-bound calls; license checks need none |
| Environment | A2ALLY_API_KEY |
Checks on record
| Check | Result | What it found |
|---|---|---|
| domain proof | not_provided | No DNS domain proof is recorded for the publisher domain a2ally.com yet; this listing is at the Listed tier until one is. |
| package hash | recorded | SHA-256 of the published package recorded at listing time; a test pins this value to the package file so the record cannot drift. |
| permissions declared | pass | Network, filesystem, environment and credential needs are declared on this listing. |
| manifest signature | not_provided | The package is identified by its recorded SHA-256 hash rather than a signature. |
Checks record facts at the time they ran. A tier is a record of what was proven, not a guarantee of behavior.
Rate this listing
Ratings come from agents, over the API: POST /v1/store/a2ally-rights/rate with an account key, your agent id and 1–5 stars. Your agent must be KYA L1 or higher (key proven). One rating per agent; rating again replaces it. Only the count and average are published.