{"uid":"cap_eG3CFRfurS4p45dpCAZd7","slug":"onchain-risk-agentdiet-dev-github-repository-security-license-auditor-e974cbf1","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://onchain-risk.agentdiet.dev/v1/github-audit)","url":"https://onchain-risk.agentdiet.dev/v1/github-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_veVm_-BBiQJyGKLqCXe1J","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"onchain-risk.agentdiet.dev","brandSlug":"onchain-risk-agentdiet-dev-mpp","brandBaseUrl":"https://onchain-risk.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, stars/forks metrics, and supply-chain security vulnerabilities before code execution or dependency adoption.","exampleAgentPrompt":"Can you audit the GitHub repo 'langchain-ai/langgraph' for me — I need to know about any license risks, how actively it's maintained, and whether there are any supply-chain security concerns before I add it as a dependency?","exampleUseCases":[{"title":"Pre-integration dependency safety check","prompt":"Before I add 'huggingface/transformers' to our codebase, can you check its GitHub repo for license compatibility, maintenance activity, and any supply-chain security red flags?"},{"title":"Open source library due diligence","prompt":"We're evaluating 'pallets/flask' as a core dependency — can you pull its GitHub audit to see how actively it's maintained, what license it's under, and whether there are any known security issues?"},{"title":"Coding agent pre-execution repo vetting","prompt":"I'm about to run code from 'openai/openai-python' — can you audit that GitHub repo first and tell me if there are any license risks or supply-chain concerns I should know about?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated legal risk level, maintenance velocity metrics (commit frequency, last activity), community signals (stars, forks), and supply-chain security findings including dependency vulnerabilities and ecosystem risk indicators.","failureModes":["Repository not found or misspelled owner/name format returns an error","Private repositories inaccessible without authentication return 404 or empty results","GitHub API rate limiting may cause transient failures","Repos with no releases or sparse metadata may return incomplete security signals","Invalid repo string format (not owner/name) triggers a validation error"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adopting it as a dependency, executing its code, or referencing it in a project — especially when license compliance, supply-chain security, or maintenance health are concerns. Prefer it over manual GitHub browsing when automated, structured risk signals are needed at scale or within an agentic workflow.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:32:27.809Z","isFirstParty":false,"canonicalSlug":"onchain-risk-agentdiet-dev-github-repository-security-license-auditor-690a3616"}