{"uid":"cap_A3-P2W9glwXDVMVOJ-qd7","slug":"token-intel-agentdiet-dev-github-repository-security-license-auditor-ce42f895","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://token-intel.agentdiet.dev/v1/sbom-auditor)","url":"https://token-intel.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bsAAG0j_RbKeO-uUjiCWg","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"token-intel.agentdiet.dev","brandSlug":"token-intel-agentdiet-dev-mpp","brandBaseUrl":"https://token-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, dependency supply-chain vulnerabilities, maintenance velocity, and community health metrics before integrating or executing its code.","exampleAgentPrompt":"Can you audit the langchain-ai/langgraph GitHub repo and tell me if it's safe to use — check for license risks, dependency vulnerabilities, and whether it's actively maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"Before I add huggingface/transformers as a dependency to my project, can you check if it has any license issues, supply-chain risks, or signs of poor maintenance?"},{"title":"Open source license compliance check","prompt":"My legal team needs to know if the license on facebook/react is safe for commercial use — can you audit it and flag any license risks?"},{"title":"AI agent tool safety screening","prompt":"I'm about to run code from modelcontextprotocol/servers in my agent environment — can you do a full security audit first and tell me about any dependency vulnerabilities or maintenance red flags?"}],"resultDescription":"Returns a structured report covering: license type and associated risk level, supply-chain security findings (SBOM/dependency vulnerabilities), repository maintenance velocity (commit frequency, last activity), community signals (stars, forks), and an overall risk assessment for the repository.","failureModes":["Invalid or non-existent repository slug returns an error — requires valid 'owner/name' format","Private repositories that are inaccessible to the auditor may return incomplete or no data","GitHub API rate limits may cause transient failures or degraded results","Repositories with no dependency manifest files may yield limited SBOM data","Payment failure via x402 will result in a 402 response before any audit is performed"],"whenToPreferThis":"Choose this endpoint when you need a pre-execution or pre-integration security assessment of a GitHub repository, particularly for license compliance, supply-chain risk, and maintenance health. It is purpose-built for coding agents that must vet open source libraries or AI toolkits before running or depending on them, and is ideal when you need a fast, single-call SBOM-style audit without standing up your own GitHub scanning pipeline.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:24:59.209Z","isFirstParty":false,"canonicalSlug":"token-intel-agentdiet-dev-github-repository-security-license-auditor-e4fc9151"}