{"uid":"cap_ygNOnZQtB7o6m-XVrH-CO","slug":"prompt-guard-agentdiet-dev-github-repository-license-dependency-d5e70e40","name":"GitHub Repository License, Dependency & Supply-Chain Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://prompt-guard.agentdiet.dev/v1/workflows/code-release-security-gate)","url":"https://prompt-guard.agentdiet.dev/v1/workflows/code-release-security-gate?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","required":["repo"],"properties":{"repo":{"type":"string","minLength":1,"description":"GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"}}},"responseSchema":{"type":"object"},"example":null,"exampleRequest":null,"tags":[],"displayCostAmount":"0.01","displayCostAsset":"USD","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"mpp","network":"tempo","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_tqo34q71znr7IR_xETSSs","protocol":"mpp","methodType":"crypto","chain":"tempo","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":"prompt-guard.agentdiet.dev","brandSlug":"prompt-guard-agentdiet-dev-mpp","brandBaseUrl":"https://prompt-guard.agentdiet.dev","brandDocsUrl":null,"whatItDoes":"Evaluates a GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution or integration.","exampleAgentPrompt":"Before I integrate langchain-ai/langgraph into our project, can you audit it for license risk, supply-chain security issues, and check how actively it's maintained?","exampleUseCases":[{"title":"Pre-integration open source vetting","prompt":"I'm thinking about adding huggingface/transformers as a dependency — can you check its license risk, dependency vulnerabilities, and whether it's still actively maintained?"},{"title":"CI/CD release security gate","prompt":"Before we cut a release, audit the repo langchain-ai/langchain for any supply-chain security issues, risky licenses, or stale maintenance signals that could block our release."},{"title":"Third-party code execution safety check","prompt":"I found a useful agent tool at modelcontextprotocol/servers — can you run a full security audit on it covering license compliance, supply-chain risks, and maintenance velocity before I let it run in production?"}],"resultDescription":"Returns a structured security report covering: license type and risk level, maintenance velocity indicators (commit frequency, last update), repository popularity signals (stars, forks), supply-chain security findings (dependency vulnerabilities, flagged packages), and an overall risk assessment for the repository.","failureModes":["Invalid or non-existent repo format returns an error (repo must be in owner/name format)","Private repositories inaccessible to the auditor return an access error","GitHub API rate limits may cause transient failures","Very new repositories with minimal history may return incomplete maintenance metrics","Network timeouts for large repositories with many dependencies"],"whenToPreferThis":"Choose this endpoint when you need a pre-integration or pre-execution security gate specifically for GitHub repositories — covering license compliance, supply-chain risk, and maintenance health in a single call. Prefer this over manual GitHub inspection or generic vulnerability scanners when you need a structured, agent-consumable risk report that combines multiple signals (license, stars, maintenance velocity, dependency security) simultaneously. Ideal for CI/CD pipelines, AI coding agents evaluating third-party code, and open source adoption workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-23T06:31:01.738Z","isFirstParty":false,"canonicalSlug":"prompt-guard-agentdiet-dev-github-repository-license-dependency-d5e70e40"}