{"uid":"cap_0dlUti2_GP3VxBCXe4l2J","slug":"shopify-intel-agentdiet-dev-github-repository-security-license-auditor-1af00dd4","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-intel.agentdiet.dev/v1/ci-cd-workflow-audit)","url":"https://shopify-intel.agentdiet.dev/v1/ci-cd-workflow-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_4rb5-0CzRdoQyrp0HMoi0","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-intel.agentdiet.dev","brandSlug":"shopify-intel-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain/dependency security before integrating or executing code from it.","exampleAgentPrompt":"Before I integrate it into our codebase, can you audit the langchain-ai/langgraph GitHub repo for license risk, supply-chain security issues, and whether it's actively maintained?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"I'm about to add modelcontextprotocol/servers as a dependency — can you audit it for license compatibility, known dependency vulnerabilities, and whether the project is actively maintained?"},{"title":"CI/CD security gate for new dependency","prompt":"We're evaluating huggingface/transformers for our ML pipeline. Can you check its license risk, maintenance velocity, stars, forks, and any supply-chain security concerns before we proceed?"},{"title":"OSS security review before code execution","prompt":"Before our agent runs any code from the openai/openai-python repo, can you audit it for supply-chain risks, outdated or vulnerable dependencies, and confirm the license is permissive?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity metrics (commit frequency, recency), popularity signals (stars, forks), and a supply-chain/dependency security assessment identifying known vulnerabilities or risky transitive dependencies.","failureModes":["Invalid or non-existent repository slug returns an error or empty result","Private repositories inaccessible via public GitHub API return an access error","GitHub API rate limiting may cause timeouts or partial results","Repos with no license file may return indeterminate license risk","Dependency manifests absent from repo may result in incomplete security scan"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or CI/CD pipeline needs to vet a GitHub repository before integrating, forking, or executing its code — especially when license compatibility, dependency vulnerability, or supply-chain risk is a concern. It is preferable over generic package scanners when you have a GitHub repo URL and want a combined license + maintenance + security signal in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:53.510Z","isFirstParty":false,"canonicalSlug":"shopify-intel-agentdiet-dev-github-repository-security-license-auditor-954c3432"}