{"uid":"cap_idQGxXKDCm9v7joNDzCZR","slug":"agentdiet-code-security-1bafb1b2","name":"agentdiet-code-security","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://agentdiet.dev/v1/code-security)","url":"https://agentdiet.dev/v1/code-security?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"unknown","protocol":"x402","network":"base","amountUsd":null,"per":"call","confidence":"unknown"},{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_4g93cwE2Dlh1kDcJgSEof","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null},{"uid":"pm_oA5tMj1-bMJkZiDt5IWKn","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, dependency supply-chain security, maintenance velocity, and community health metrics before code execution.","exampleAgentPrompt":"Before I add the 'langchain-ai/langchain' GitHub repo as a dependency, can you audit it for license risks, supply-chain vulnerabilities, and check how actively maintained it is?","exampleUseCases":[{"title":"Pre-integration dependency security check","prompt":"Can you audit the GitHub repo 'huggingface/transformers' for license risk and supply-chain vulnerabilities before I add it to our production project?"},{"title":"Open source license compliance review","prompt":"I need to know if the GitHub repo 'facebook/react' has any problematic licenses or copyleft issues that could affect our commercial product — can you run a full license audit on it?"},{"title":"Evaluating a new library's maintenance health","prompt":"Check the GitHub repo 'tiangolo/fastapi' for me — how actively maintained is it, what are the stars and forks, and are there any security concerns I should know about before using it?"}],"resultDescription":"Returns a structured report covering license risk classification, supply-chain security findings, dependency vulnerability flags, repository maintenance velocity (commit frequency, last activity), community health indicators (stars, forks), and an overall risk assessment for the repository.","failureModes":["Invalid or non-existent GitHub repository URL returns an error","Private repositories not accessible without credentials may return 404","GitHub API rate limiting may cause temporary failures","Repositories with no dependency manifest files may return incomplete results","Payment failure via x402 protocol prevents endpoint access"],"whenToPreferThis":"Choose this endpoint when an AI coding agent needs to vet a third-party GitHub repository for security, license compliance, or maintenance health before executing code or adding a dependency — especially in automated pipelines where human review is not practical. Prefer over manual GitHub browsing or generic vulnerability scanners when you need a single consolidated risk report covering license, supply-chain, and community signals in one call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:48:00.486Z","isFirstParty":false,"canonicalSlug":"agentdiet-code-security-1bafb1b2"}