{"uid":"cap_gp-oqy5KxqimZ7gJGL5dB","slug":"x402-audit-agentdiet-dev-github-repository-security-license-auditor-3f92bcef","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://x402-audit.agentdiet.dev/v1/workflows/code-release-security-gate)","url":"https://x402-audit.agentdiet.dev/v1/workflows/code-release-security-gate?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_vXPP6YM5j5JdhPrZx4HpN","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"x402-audit.agentdiet.dev","brandSlug":"x402-audit-agentdiet-dev-mpp","brandBaseUrl":"https://x402-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, dependency vulnerabilities, and supply-chain security before code execution or integration.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to my project, can you audit the GitHub repo for any license risks, security vulnerabilities, and check how actively it's being maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm thinking of using modelcontextprotocol/servers as a dependency — can you check the GitHub repo for any risky licenses, supply-chain vulnerabilities, and tell me how healthy its maintenance looks?"},{"title":"Open source release security gate","prompt":"Before we ship our next release, audit vercel/next.js on GitHub to make sure none of its dependencies have known vulnerabilities or problematic licenses that could block us."},{"title":"Third-party vendor library review","prompt":"Our security team wants a full risk report on huggingface/transformers — can you pull the GitHub audit including license risk, stars and forks, and any supply-chain security red flags?"}],"resultDescription":"Returns a structured security and compliance report for the given GitHub repository, including: license type and risk classification, maintenance velocity indicators (commit frequency, last activity), repository popularity metrics (stars, forks), dependency vulnerability findings, and an overall supply-chain security assessment suitable for use as a release gate decision.","failureModes":["Invalid or non-existent repository (owner/name format not found on GitHub) returns an error","Private repositories that are inaccessible to the auditor return an access error","GitHub API rate limiting may cause partial or failed results","Repositories with no dependency manifest files may yield incomplete dependency analysis","Payment failure via x402 protocol results in HTTP 402 response blocking execution"],"whenToPreferThis":"Choose this endpoint when you need a pre-integration or pre-release security gate specifically for GitHub repositories — covering license compliance, dependency CVEs, and supply-chain risk in a single call. Prefer it over generic vulnerability scanners when you need combined license + maintenance + supply-chain context in one response, especially in automated CI/CD or agent-driven code review pipelines.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:32:43.586Z","isFirstParty":false,"canonicalSlug":"x402-audit-agentdiet-dev-github-repository-security-license-auditor-dc844e19"}