{"uid":"cap_hSsMH_KJJ-GUmbS9rU53X","slug":"github-audit-agentdiet-dev-github-repository-security-license-auditor-2e6caf6c","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/repo-risk-score)","url":"https://github-audit.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_md7nlK5iGfrQ78399fvTk","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a full security audit on it — check the license risk, how actively it's maintained, its stars and forks, and any supply-chain red flags?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to pull in modelcontextprotocol/servers as a dependency — can you audit it for license issues, check how actively it's maintained, and flag any supply-chain security concerns?"},{"title":"Open source project due diligence","prompt":"We're evaluating huggingface/transformers for our production stack. Can you score it on license risk, maintenance velocity, community size, and supply-chain security so I can decide if it's safe to adopt?"},{"title":"Automated coding agent safety check","prompt":"Before executing any code from the repo openai/openai-python, run a risk assessment — I want to know the license type risk, whether the project is still actively maintained, and if there are any supply-chain red flags."}],"resultDescription":"Returns a structured risk report for the specified GitHub repository, including a license risk rating, maintenance velocity metrics, repository popularity signals (stars, forks), and supply-chain security flags — aggregated into an overall risk score to guide safe dependency adoption.","failureModes":["Invalid or non-existent repo format returns an error (repo must be in owner/name format)","Private or inaccessible repositories may return incomplete data","GitHub API rate limiting may cause transient failures","Repos with no license file may return unknown license risk","Very new repos with minimal history may have low-confidence velocity signals"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, executing its code, or adopting it in a production stack. It is specifically suited for pre-flight supply-chain and license compliance checks, combining GitHub metadata (stars, forks, commit velocity) with security signals in a single scored response — unlike generic GitHub API calls or OSV.dev package scanners that only cover one dimension.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:23:01.028Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-github-repository-security-license-auditor-8ba1cf13"}