{"uid":"cap_ahjhf6u-xsffbKUrTBnF5","slug":"onchain-risk-agentdiet-dev-github-repository-security-license-auditor-f8baa12d","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://onchain-risk.agentdiet.dev/v1/ci-cd-workflow-audit)","url":"https://onchain-risk.agentdiet.dev/v1/ci-cd-workflow-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Urv-r1w4uU5NEqZbXBpZx","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"onchain-risk.agentdiet.dev","brandSlug":"onchain-risk-agentdiet-dev-mpp","brandBaseUrl":"https://onchain-risk.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, dependency supply-chain vulnerabilities, maintenance velocity, and community health metrics before code use or integration.","exampleAgentPrompt":"Can you audit the langchain-ai/langgraph GitHub repo for me — check its license risk, how actively it's maintained, and whether there are any supply-chain or dependency security concerns I should know about before we use it?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"Before I add facebook/react to our codebase, can you check its GitHub repo for license compatibility, how actively it's being maintained, and any known dependency or supply-chain risks?"},{"title":"CI/CD pipeline security gate","prompt":"We're automating our code review process — can you scan the tiangolo/fastapi GitHub repo for license risk and supply-chain vulnerabilities so we can decide whether to approve it in our pipeline?"},{"title":"Startup due diligence on vendor repo","prompt":"We're evaluating a vendor who built on openai/openai-python — can you audit that GitHub repo for license issues, maintenance health, and any security red flags in its dependencies?"}],"resultDescription":"Returns a structured report covering the repository's license type and risk level, maintenance velocity indicators (commit frequency, last activity), community signals (stars, forks), and supply-chain security assessment including dependency vulnerability flags and any detected risky CI/CD patterns.","failureModes":["Invalid or non-existent repo format returns an error (must be owner/name format)","Private repositories may not be accessible and return a not-found or permission error","Rate limiting or GitHub API unavailability may cause timeouts","Repos with no license file may return unknown license risk","Very new or empty repos may have insufficient data for maintenance velocity scoring"],"whenToPreferThis":"Choose this endpoint when an AI agent or developer needs to programmatically vet a GitHub repository before using it — especially for license compliance checks, supply-chain security screening, or assessing maintenance health. Ideal for CI/CD pipelines, automated dependency reviews, or pre-integration due diligence workflows where a structured, machine-readable security report is needed rather than manual GitHub browsing.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:20.409Z","isFirstParty":false,"canonicalSlug":"onchain-risk-agentdiet-dev-github-repository-security-license-auditor-690a3616"}