{"uid":"cap_v5PvV0vTcKvArcUm7u2Xv","slug":"sec-intel-agentdiet-dev-github-repository-security-auditor-sbom-a0a38e22","name":"GitHub Repository Security Auditor (SBOM, License & Supply-Chain)","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://sec-intel.agentdiet.dev/v1/sbom-auditor)","url":"https://sec-intel.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_o3CCrV_I8W7j4-I715FqT","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"sec-intel.agentdiet.dev","brandSlug":"sec-intel-agentdiet-dev-mpp","brandBaseUrl":"https://sec-intel.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, dependency vulnerabilities, and supply-chain security.","exampleAgentPrompt":"Can you audit the GitHub repo langchain-ai/langgraph for license risks, supply-chain vulnerabilities, and check how actively it's maintained before I add it as a dependency?","exampleUseCases":[{"title":"Pre-integration open-source vetting","prompt":"Before I add huggingface/transformers as a dependency, can you check it for license compatibility issues, supply-chain risks, and tell me if it's still actively maintained?"},{"title":"Coding agent dependency safety check","prompt":"I'm about to have my coding agent pull in psf/requests — can you audit that repo for any vulnerability or license red flags first?"},{"title":"Internal open-source compliance review","prompt":"Our legal team needs a license risk report on pytorch/pytorch before we ship our product — can you pull the repo audit with maintenance stats and any supply-chain concerns?"}],"resultDescription":"Returns a structured report covering license risk classification, maintenance velocity indicators (commit frequency, last update), repository popularity metrics (stars, forks), supply-chain security findings, and dependency vulnerability summary for the specified GitHub repository.","failureModes":["Invalid or non-existent repository name returns an error","Private repositories inaccessible without credentials may return empty or error response","GitHub API rate limits may cause intermittent failures","Repositories with no dependency files may return limited SBOM data","Malformed owner/name format triggers input validation error"],"whenToPreferThis":"Choose this endpoint when an AI coding agent or developer needs to vet a GitHub repository before integrating it as a dependency — especially for license compatibility checks, supply-chain security assessment, or evaluating project health and maintenance velocity. Prefer this over generic GitHub API calls when you need a consolidated, security-focused audit report in a single request.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-21T07:22:42.059Z","isFirstParty":false,"canonicalSlug":"sec-intel-agentdiet-dev-github-repository-security-auditor-sbom-a0a38e22"}