{"uid":"cap_nG2lsMTgykdhzWzSzEl_K","slug":"shopify-spy-agentdiet-dev-github-repository-security-license-auditor-c8af0986","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://shopify-spy.agentdiet.dev/v1/sbom-auditor)","url":"https://shopify-spy.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_-SVolDmIGKyHnZUj43rCR","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"shopify-spy.agentdiet.dev","brandSlug":"shopify-spy-agentdiet-dev-mpp","brandBaseUrl":"https://shopify-spy.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code integration or execution.","exampleAgentPrompt":"Can you audit the langchain-ai/langgraph GitHub repo and tell me about its license risk, how actively it's maintained, and whether there are any supply-chain security concerns I should know about before using it?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"Before I add huggingface/transformers as a dependency, can you check its license risk, how often it's maintained, and whether there are any supply-chain security red flags?"},{"title":"Open-source license compliance check","prompt":"Our legal team needs to know if microsoft/semantic-kernel uses any GPL or AGPL licenses that could cause compliance issues — can you audit it?"},{"title":"Evaluating a new AI framework adoption","prompt":"We're considering building on top of run-llama/llama_index — can you give me a security and maintenance health report on that GitHub repo so I can decide if it's production-ready?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated legal/compliance risk, maintenance velocity indicators (commit frequency, last push date), community signals (stars, forks), and supply-chain security findings including dependency vulnerabilities and any flagged risks.","failureModes":["Invalid or non-existent repository slug returns an error — ensure format is owner/name (e.g. langchain-ai/langgraph)","Private repositories may not be accessible and will return an access error","Rate limits on underlying GitHub API may cause transient failures","Repository with no license file may return ambiguous license risk result","Payment/402 failure if USDC balance is insufficient for the $0.01 call fee"],"whenToPreferThis":"Choose this endpoint when you need a quick, comprehensive pre-integration security and compliance audit of a specific GitHub repository — especially useful for AI coding agents vetting third-party libraries before adding them as dependencies, or for legal/compliance workflows requiring license classification. Prefer this over raw GitHub API calls when you want supply-chain risk, license risk, and maintenance health aggregated in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:48:35.314Z","isFirstParty":false,"canonicalSlug":"shopify-spy-agentdiet-dev-github-repository-security-license-auditor-6b511ce2"}