{"uid":"cap_jXODmQxctTy8gT3oVZ_Oa","slug":"shopify-spy-agentdiet-dev-github-repository-security-license-auditor-424855f0","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-spy.agentdiet.dev/v1/secret-leak-scan)","url":"https://shopify-spy.agentdiet.dev/v1/secret-leak-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_a89yhv8qaJalIiFmznHC_","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-spy.agentdiet.dev","brandSlug":"shopify-spy-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-spy.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code integration or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risk, how actively it's maintained, and any supply-chain security concerns?","exampleUseCases":[{"title":"Pre-adoption open source vetting","prompt":"I'm thinking about using modelcontextprotocol/servers in my project — can you check its license, how active the maintainers are, and whether there are any supply-chain security red flags?"},{"title":"Coding agent dependency safety check","prompt":"Before my agent executes code that depends on huggingface/transformers, audit that GitHub repo for risky licenses, stale maintenance, and any security issues in its supply chain."},{"title":"Enterprise compliance review","prompt":"Our team is evaluating apache/airflow for an enterprise deployment — run a full audit on that GitHub repo so I can see its license type, community health metrics like stars and forks, and any supply-chain risks."}],"resultDescription":"Returns a structured assessment of the specified GitHub repository including license type and risk level, maintenance velocity indicators, star and fork counts, and supply-chain security findings that help determine whether the project is safe to depend on or integrate.","failureModes":["Invalid repo format (must be owner/name) returns an error","Private or non-existent repository may return 404 or empty data","Rate limiting on GitHub API may cause degraded or partial results","Payment not fulfilled returns HTTP 402 with payment instructions","Repository with no license file may return ambiguous license risk"],"whenToPreferThis":"Choose this endpoint when you need a fast, agent-native pre-flight check on any GitHub repository before adding it as a dependency, executing its code, or including it in a supply chain. It is especially valuable for coding agents performing automated dependency vetting, security-conscious developers evaluating open source libraries, and compliance workflows requiring license risk classification — all in a single call without manually checking GitHub, SPDX, or security advisories separately.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:27.639Z","isFirstParty":false,"canonicalSlug":"shopify-spy-agentdiet-dev-github-repository-security-license-auditor-6b511ce2"}