{"uid":"cap_ocrp_OhAe2prpwp2yv8eE","slug":"sec-intel-agentdiet-dev-github-repository-security-license-auditor-10e2c0b3","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://sec-intel.agentdiet.dev/v1/github-secops-auditor)","url":"https://sec-intel.agentdiet.dev/v1/github-secops-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_RQmeyzztn_tLLyQ4-toXr","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"sec-intel.agentdiet.dev","brandSlug":"sec-intel-agentdiet-dev-mpp","brandBaseUrl":"https://sec-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks activity, dependency vulnerabilities, and supply-chain security signals.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency in my project, can you audit that GitHub repo for license risks, supply-chain security issues, and check whether it's actively maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to pull in modelcontextprotocol/servers as a dependency — can you audit that GitHub repo and tell me if there are any license red flags, security supply-chain concerns, or signs it's poorly maintained?"},{"title":"Open source license compliance check","prompt":"Our legal team needs to know whether huggingface/transformers uses any copyleft or high-risk licenses — can you run a license risk audit on that GitHub repo?"},{"title":"Evaluating a third-party tool before deployment","prompt":"I found a GitHub project called 'run-llm/openagent' that I want to use in production — audit it for maintenance velocity, dependency vulnerabilities, and supply-chain security risks so I know if it's trustworthy."}],"resultDescription":"Returns a structured assessment of the target GitHub repository including: license type and associated risk level, maintenance velocity indicators (commit frequency, last activity), community signals (stars, forks), dependency vulnerability findings, and supply-chain security signals that help an agent decide whether it is safe to use or execute code from the repository.","failureModes":["Invalid or nonexistent repository (owner/name format wrong or repo not found on GitHub)","Rate limiting or GitHub API quota exhaustion causing incomplete results","Private repositories that cannot be accessed publicly","Repositories with no dependency manifests may return limited vulnerability data","Payment not processed (HTTP 402) if x402 payment headers are missing or invalid"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to perform a pre-integration security review of a GitHub repository — especially before adding a new open-source dependency, executing third-party code, or assessing license compliance. It is particularly valuable in automated pipelines where an agent must decide whether a repo is trustworthy before taking further action. Prefer this over general web search when you need structured, machine-readable security signals (license risk, supply-chain health, maintenance velocity) in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:51.450Z","isFirstParty":false,"canonicalSlug":"sec-intel-agentdiet-dev-github-repository-security-license-auditor-06690981"}