{"uid":"cap_qhPbFdoJ1OGxUjmdZioul","slug":"cve-intel-agentdiet-dev-github-repository-security-license-auditor-2f366d60","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/v1/github-secops-auditor)","url":"https://cve-intel.agentdiet.dev/v1/github-secops-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_xV-pQAgjHOt7znmx-FeY0","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"cve-intel.agentdiet.dev","brandSlug":"cve-intel-agentdiet-dev-mpp","brandBaseUrl":"https://cve-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, dependency supply-chain vulnerabilities, stars, and forks before integrating or executing its code.","exampleAgentPrompt":"Before I pull in langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risk, supply-chain vulnerabilities, and whether it's still actively maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm about to use modelcontextprotocol/servers in my project — can you check whether its license is safe for commercial use, if there are any known supply-chain issues, and how actively it's being maintained?"},{"title":"Open-source library due diligence","prompt":"We're evaluating huggingface/transformers as a dependency for our product. Can you pull a full security and license audit on that GitHub repo so I can decide if it's safe to ship?"},{"title":"Coding agent pre-execution safety check","prompt":"Before my coding agent runs code from the repo openai/openai-python, can you audit it for vulnerable dependencies, license risks, and check if it has decent community traction like stars and forks?"}],"resultDescription":"Returns a structured report covering: license type and risk level, maintenance velocity (commit frequency, last activity), community signals (stars, forks), and supply-chain security findings including vulnerable or suspicious dependencies.","failureModes":["Invalid or non-existent repo (owner/name format required) returns an error","Private repositories that are inaccessible to the auditor return access denied","GitHub API rate limits may cause intermittent failures","Repos with no license file may return ambiguous license risk data","Very new repos with minimal history may yield limited maintenance velocity signals"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs a pre-flight security check on a GitHub repository before integrating it as a dependency, executing its code, or recommending it to users. It is especially valuable for supply-chain risk assessment, license compliance checks in commercial projects, and evaluating whether a repository is actively maintained. Prefer this over generic CVE lookup tools when you need GitHub-specific signals like stars, forks, and commit velocity alongside vulnerability and license data in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T12:51:33.175Z","isFirstParty":false,"canonicalSlug":"cve-intel-agentdiet-dev-github-repository-security-license-auditor-71c7ce73"}