{"uid":"cap_pkv1hL-jEzKh7YegsrUpB","slug":"cve-intel-agentdiet-dev-github-repository-security-license-auditor-sbom-dc719735","name":"GitHub Repository Security & License Auditor (SBOM)","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/v1/sbom-auditor)","url":"https://cve-intel.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_hnvMgWc2hFbUs8_J2Y7aX","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, dependency vulnerabilities, maintenance health, and supply-chain security before code integration or execution.","exampleAgentPrompt":"Before I add langchain-ai/langgraph to my project, can you audit that GitHub repo for license risks, supply-chain vulnerabilities, and check how actively maintained it is?","exampleUseCases":[{"title":"Vetting open source dependency before integration","prompt":"I'm about to add modelcontextprotocol/servers as a dependency — can you audit that GitHub repo for license compatibility, known CVEs in its dependencies, and tell me how healthy the project looks maintenance-wise?"},{"title":"Pre-merge security review for third-party code","prompt":"We're reviewing a pull request that adds openai/openai-python as a dependency. Can you run a full supply-chain and license audit on that GitHub repo so I know if there are any red flags before we approve the merge?"},{"title":"Evaluating community health of an AI framework","prompt":"I want to know if huggingface/transformers is a safe and actively maintained project to build on — can you check its stars, fork activity, maintenance velocity, and any dependency security issues?"}],"resultDescription":"Returns a structured report covering the repository's license type and associated risk level, maintenance velocity indicators (commit frequency, last activity), community metrics (stars, forks), and supply-chain/dependency security findings including known CVEs or vulnerable packages.","failureModes":["Invalid or non-existent repository (owner/name not found on GitHub) returns an error","Private repositories that are inaccessible to the auditor will fail","Rate limiting or GitHub API unavailability may cause transient failures","Repositories with no declared dependencies may return limited SBOM data","Payment failure via x402 protocol may block the request"],"whenToPreferThis":"Choose this endpoint when you need a pre-integration safety check on any GitHub repository, combining license compliance, dependency CVE scanning, and maintenance health into a single call. It is especially valuable for AI coding agents that are about to execute or incorporate third-party code and need a quick risk signal before proceeding.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:24.902Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-github-repository-security-license-auditor-sbom-dc719735"}