{"uid":"cap_rDV_Kd3tNozvakqnSo3nm","slug":"polymarket-odds-agentdiet-dev-github-repository-security-license-2e0a1ed9","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://polymarket-odds.agentdiet.dev/v1/secret-leak-scan)","url":"https://polymarket-odds.agentdiet.dev/v1/secret-leak-scan?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_alBAnDa9nA4YmFmyklWbN","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"polymarket-odds.agentdiet.dev","brandSlug":"polymarket-odds-agentdiet-dev-mpp","brandBaseUrl":"https://polymarket-odds.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, dependency vulnerabilities, and supply-chain security signals","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risk, how actively it's maintained, and any supply-chain or secret-leak security issues?","exampleUseCases":[{"title":"Pre-integration dependency risk check","prompt":"I'm about to add modelcontextprotocol/servers to our project — can you check its license, see how actively it's maintained, and flag any supply-chain security concerns?"},{"title":"Open source library vetting for enterprise use","prompt":"Our legal team needs to know if apache/kafka has any license restrictions that would block commercial use, and whether the repo looks healthy and well-maintained."},{"title":"Security audit before forking a repo","prompt":"I want to fork huggingface/transformers for internal use — please audit it for any dependency vulnerabilities, secret leaks, and license issues I should know about first."}],"resultDescription":"Returns a structured report on the GitHub repository including license type and associated risk level, maintenance velocity indicators (commit frequency, last activity), community signals (stars, forks), dependency vulnerability findings, and supply-chain security flags such as potential secret leaks.","failureModes":["Invalid or non-existent repo slug returns an error (e.g. typo in owner/name format)","Private repositories inaccessible to the scanner return an access error","GitHub API rate limiting may cause incomplete results or timeout","Repos with no dependency manifest files may return limited vulnerability data","Payment failure (HTTP 402) if x402 micropayment is not processed"],"whenToPreferThis":"Choose this endpoint when an AI agent or developer needs a quick pre-integration security and license health check on any public GitHub repository, especially before adding a dependency, forking code, or executing code from an unknown source. Prefer it over manual GitHub inspection when you need a structured, machine-readable risk report covering license, maintenance, and supply-chain signals in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:18:47.430Z","isFirstParty":false,"canonicalSlug":"polymarket-odds-agentdiet-dev-github-repository-security-license-7a22011f"}