{"uid":"cap_giJb9yE5gOXuZCR5U1E6t","slug":"sec-intel-agentdiet-dev-github-repository-security-license-auditor-ed7b7426","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://sec-intel.agentdiet.dev/v1/secret-leak-scan)","url":"https://sec-intel.agentdiet.dev/v1/secret-leak-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_4ZF9dYqUbUNB_6f7Plm5p","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"sec-intel.agentdiet.dev","brandSlug":"sec-intel-agentdiet-dev-mpp","brandBaseUrl":"https://sec-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance health, stars/forks metrics, dependency vulnerabilities, and supply-chain security issues.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risks, supply-chain vulnerabilities, any leaked secrets, and tell me how actively maintained it is?","exampleUseCases":[{"title":"Pre-integration dependency security check","prompt":"I'm about to add huggingface/transformers to my production codebase — can you audit that GitHub repo for any license red flags, dependency vulnerabilities, or supply-chain security issues I should know about?"},{"title":"Open-source project due diligence","prompt":"We're evaluating openai/openai-python as a dependency for our commercial SaaS product. Can you check its license risk, maintenance velocity, and whether there are any known security concerns in the repo?"},{"title":"Secret leak detection in a public repo","prompt":"Can you scan the repo pallets/flask on GitHub to check if any secrets or API keys have been accidentally committed, and give me an overall security health summary?"}],"resultDescription":"Returns a structured security report including license type and risk rating, maintenance velocity metrics (commit frequency, last activity), repository popularity signals (stars, forks), detected dependency vulnerabilities, supply-chain security flags, and any identified secret or credential leaks in the repository.","failureModes":["Invalid or non-existent repository name returns an error or empty result","Private repositories inaccessible without authentication may return 404 or access-denied","GitHub API rate limiting may cause transient failures or degraded results","Very large repositories may take longer to scan or return partial results","Repositories with no dependency manifest files may have limited supply-chain analysis"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adding it as a dependency, executing its code, or integrating it into a project — especially when license compatibility, secret leaks, supply-chain security, or maintenance health are concerns. It is purpose-built for pre-execution security due diligence on GitHub repos, making it more targeted than generic OSINT or vulnerability database lookup tools.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:38.456Z","isFirstParty":false,"canonicalSlug":"sec-intel-agentdiet-dev-github-repository-security-license-auditor-06690981"}