{"uid":"cap_QN9PN_OHokPaSLj-PrqeV","slug":"shopify-intel-agentdiet-dev-github-repository-security-license-auditor-b73b72bb","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-intel.agentdiet.dev/v1/github-secops-auditor)","url":"https://shopify-intel.agentdiet.dev/v1/github-secops-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_08UmbXAB7UjNQNci9Ev7f","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-intel.agentdiet.dev","brandSlug":"shopify-intel-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security vulnerabilities before integrating or executing its code.","exampleAgentPrompt":"Before I add it to my project, can you run a full security and license audit on the langchain-ai/langgraph GitHub repo — I need to know about any dependency vulnerabilities, supply chain risks, and whether the license could be a problem?","exampleUseCases":[{"title":"Pre-integration dependency safety check","prompt":"I'm thinking of using the huggingface/transformers repo as a dependency — can you audit it for license risk, known supply chain vulnerabilities, and tell me how actively it's being maintained?"},{"title":"Open source license compliance review","prompt":"Our legal team needs to know if vercel/next.js uses any copyleft or restrictive licenses that could affect our commercial product — can you pull a license risk report for that repo?"},{"title":"Evaluating an unfamiliar library's health","prompt":"Before my team starts using supabase/supabase in production, can you check how healthy it is — stars, forks, recent maintenance activity, and any security flags I should know about?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity (commit frequency, last activity), popularity metrics (stars, forks), and supply-chain security findings including known dependency vulnerabilities and risk indicators.","failureModes":["Invalid or non-existent repo slug returns an error (repo not found)","Private repositories that are inaccessible return an authorization error","GitHub API rate limiting may cause transient failures","Repositories with no dependency manifest may return incomplete supply-chain data","Malformed owner/name format returns a validation error"],"whenToPreferThis":"Use this endpoint when an AI agent or developer needs a pre-flight security and compliance check on a GitHub repository before importing, executing, or depending on its code. It is particularly valuable for autonomous coding agents that need to vet third-party libraries at runtime, for legal/compliance workflows requiring license classification, and for DevSecOps pipelines that need supply-chain risk signals without setting up a full SAST toolchain.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:00.044Z","isFirstParty":false,"canonicalSlug":"shopify-intel-agentdiet-dev-github-repository-security-license-auditor-954c3432"}