{"uid":"cap_uU-R62rjt3PXvna2WVU0G","slug":"github-audit-agentdiet-dev-github-repository-security-license-auditor-e7cd8277","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/sbom-auditor)","url":"https://github-audit.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ztKrpO_9ole3zMBHijbM5","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, dependency vulnerabilities, maintenance health, and supply-chain security signals before integrating or executing its code.","exampleAgentPrompt":"Before I integrate langchain-ai/langgraph into my project, can you audit that GitHub repo for license risks, unmaintained dependencies, and any supply-chain security issues?","exampleUseCases":[{"title":"Pre-integration repo due diligence","prompt":"I'm thinking of using modelcontextprotocol/servers as a dependency — can you audit that GitHub repo and tell me if it has any concerning licenses, CVEs, or signs it's abandoned?"},{"title":"Vetting an open-source AI framework","prompt":"Audit the huggingface/transformers GitHub repo for me — I need to know its license type, whether it's actively maintained, and if there are any known supply-chain security risks before my team adopts it."},{"title":"Security check before code execution","prompt":"Can you scan the repo openai/openai-python on GitHub and flag any dependency vulnerabilities, sketchy license conditions, or low-trust signals I should know about before running it in our environment?"}],"resultDescription":"Returns a structured report including the repository's detected license and associated risk level, maintenance velocity indicators (commit frequency, last commit date), popularity signals (stars, forks), identified dependency vulnerabilities or CVE flags, and overall supply-chain security assessment — giving an agent a go/no-go signal before integrating or executing the code.","failureModes":["Invalid or non-existent repository name returns an error (repo not found)","Private repositories may not be accessible without authentication","Rate limiting on GitHub API may cause intermittent failures","Repositories with no dependency manifests may return incomplete SBOM data","Malformed owner/name format in the repo parameter causes a validation error"],"whenToPreferThis":"Choose this endpoint when an AI agent or developer needs to vet a GitHub repository before integrating it as a dependency, running its code, or recommending it — especially when license compatibility, supply-chain risk, and maintenance health all need to be assessed in a single call. Prefer over raw GitHub API calls when you need a pre-processed security summary rather than raw metadata.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:21:49.832Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-github-repository-security-license-auditor-8ba1cf13"}