{"uid":"cap_hm2qcqZath9-yjZKFRPUd","slug":"prompt-guard-agentdiet-dev-github-repository-security-license-risk-2c0dd7a2","name":"GitHub Repository Security & License Risk Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://prompt-guard.agentdiet.dev/v1/repo-risk-score)","url":"https://prompt-guard.agentdiet.dev/v1/repo-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_wIzKKLpemksXPCytr9Fex","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"prompt-guard.agentdiet.dev","brandSlug":"prompt-guard-agentdiet-dev-mpp","brandBaseUrl":"https://prompt-guard.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance health, popularity signals, and supply-chain security before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you run a security and license audit on it — I want to know if it has any risky licenses, how actively it's maintained, and whether there are any supply-chain concerns?","exampleUseCases":[{"title":"Vetting a new open-source dependency","prompt":"I'm about to use modelcontextprotocol/servers in production — can you audit it for license risk, supply-chain security issues, and tell me how healthy the project looks based on its maintenance activity and community size?"},{"title":"Pre-merge security check in CI pipeline","prompt":"Before we merge this PR that pulls in huggingface/transformers, run a full repo risk audit on it — license compatibility, dependency security, and maintenance velocity — I need to know if it's safe to include."},{"title":"Comparing two libraries for safety","prompt":"I'm choosing between two repos for a project: openai/openai-python and anthropics/anthropic-sdk-python. Can you audit both for license risk and supply-chain security so I can pick the safer one?"}],"resultDescription":"Returns a structured risk assessment object containing license risk classification, maintenance velocity indicators (commit frequency, last activity), community signals (stars, forks), and supply-chain security findings for the specified GitHub repository.","failureModes":["Invalid repo format (not owner/name) returns validation error","Private or non-existent repository returns 404 or access error","GitHub API rate limiting may cause partial data or timeout","Repository with no releases or sparse metadata may return incomplete scores","Payment failure via x402 protocol returns 402 before processing"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency, running its code, or recommending it — especially when license compatibility, supply-chain security, or maintenance health are concerns. Prefer this over generic GitHub API calls when you need a composite risk score rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:49:13.534Z","isFirstParty":false,"canonicalSlug":"prompt-guard-agentdiet-dev-github-repository-security-license-risk-2c0dd7a2"}