{"uid":"cap_yW8tsKmJ25lFQ7p5dbBoa","slug":"github-audit-agentdiet-dev-github-repository-security-license-auditor-9ac612e9","name":"GitHub Repository Security & License Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/.well-known/agent-card.json)","url":"https://github-audit.agentdiet.dev/.well-known/agent-card.json?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.010000","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.010000/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.010000","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.010000","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_j_CDqqtJ46xv3JBASXuFz","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.010000","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":"github-audit.agentdiet.dev","brandSlug":"github-audit-agentdiet-dev-mpp","brandBaseUrl":"https://github-audit.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Audits a GitHub repository for license risk, maintenance velocity, stars/forks, dependency health, and supply-chain security before integrating or executing its code.","exampleAgentPrompt":"Before I add langchain-ai/langgraph as a dependency, can you audit that GitHub repo for license risks, supply-chain security issues, and check how actively it's being maintained?","exampleUseCases":[{"title":"Pre-integration dependency vetting","prompt":"I'm thinking about using huggingface/transformers in our project — can you audit that GitHub repo and tell me if there are any license red flags or supply-chain security concerns I should know about?"},{"title":"Open source license compliance check","prompt":"Our legal team needs to know if openai/openai-python uses any GPL or AGPL licenses that could affect our commercial product — can you run a license risk audit on that repo?"},{"title":"Evaluating a new library's maintenance health","prompt":"Before I recommend tiangolo/fastapi to our team, can you check how actively it's maintained, how many stars and forks it has, and whether there are any known supply-chain risks?"}],"resultDescription":"Returns a structured report covering license type and risk level, maintenance velocity (commit frequency, last commit date), repository popularity signals (stars, forks), supply-chain security indicators, and dependency health — helping agents and developers make informed decisions before integrating or executing code from the repository.","failureModes":["Invalid or non-existent repository format returns an error (repo must be in owner/name format)","Private repositories that are inaccessible to the auditor will return an access error","GitHub API rate limiting may cause transient failures","Repos with no license file may return incomplete license data","Very new repos with minimal activity may lack sufficient data for velocity analysis"],"whenToPreferThis":"Use this endpoint when an AI coding agent or developer needs to vet a GitHub repository before adopting it as a dependency, executing its code, or integrating it into a project. Prefer this over generic web search when you need structured, machine-readable security and license signals specifically from GitHub repository metadata. Especially valuable in automated CI/CD pipelines or agentic coding workflows where supply-chain security and license compliance must be verified programmatically.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:37:27.247Z","isFirstParty":false,"canonicalSlug":"github-audit-agentdiet-dev-github-repository-security-license-auditor-8ba1cf13"}