{"uid":"cap_I_y4wlo7OT4qGptA79vGb","slug":"json-repair-agentdiet-dev-github-repository-security-license-auditor-0a6cfa2d","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://json-repair.agentdiet.dev/v1/secret-leak-scan)","url":"https://json-repair.agentdiet.dev/v1/secret-leak-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_cVz_4vV3SMxeyq6p6Z5V2","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"json-repair.agentdiet.dev","brandSlug":"json-repair-agentdiet-dev-mpp","brandBaseUrl":"https://json-repair.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, dependency supply-chain vulnerabilities, and secret leaks before integrating it into a codebase.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit it for license risks, secret leaks, supply-chain vulnerabilities, and check how actively it's maintained?","exampleUseCases":[{"title":"Pre-integration dependency safety check","prompt":"I'm about to pull in modelcontextprotocol/servers as a dependency — can you scan it for any license issues, exposed secrets, or supply-chain red flags first?"},{"title":"Open source license compliance review","prompt":"Can you check the license risk for huggingface/transformers? I need to know if it's safe to use in a commercial product before I include it."},{"title":"Evaluating an unfamiliar repo for trustworthiness","prompt":"Someone recommended I use the repo psf/requests in my project — can you tell me how actively it's maintained, how many stars and forks it has, and whether there are any security concerns I should know about?"}],"resultDescription":"Returns a structured report covering the repository's detected license type and its commercial risk level, maintenance velocity indicators (commit frequency, last push date), community signals (stars, forks, open issues), supply-chain security findings, and any detected secret leaks or exposed credentials in the codebase.","failureModes":["Invalid or non-existent repository name returns an error or empty result","Private repositories that are inaccessible to the scanner return permission errors","GitHub API rate limiting may cause intermittent failures","Repositories with no license file may return an unknown license risk","Network timeouts for very large repositories with many files to scan"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs to vet a third-party GitHub repository before adding it as a dependency, forking it, or executing its code. It is especially valuable for compliance-sensitive environments where license compatibility matters, or when evaluating lesser-known open-source libraries for supply-chain trustworthiness. Prefer this over a generic web search when you need structured, machine-readable security and licensing signals about a specific GitHub repo.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:47:12.572Z","isFirstParty":false,"canonicalSlug":"json-repair-agentdiet-dev-github-repository-security-license-auditor-888ecd4f"}