# AgentDiet GitHub Repository Security Audit

> AgentDiet GitHub Repository Security Audit is a paid API for AI agents from agentdiet.dev, paid per call via x402 or MPP, $0.01/call, status unknown (last checked 2026-10-20).

Audits a GitHub repository for dependency vulnerabilities, license risks, and security issues, returning a distilled intelligence summary.

## Facts

- Endpoint: GET https://agentdiet.dev/v1/github-audit?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402, MPP
- Status: unknown
- Last checked: 2026-10-20
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentdiet-github-repository-security-audit-5109a3c0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_XDmhAoex1ax-I0MOZ0K-k

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentdiet-github-repository-security-audit-5109a3c0
```

Example prompt: Can you run a security and license audit on the GitHub repo 'expressjs/express' and tell me if there are any vulnerable dependencies or license issues I should know about?

## When to prefer this

Choose this endpoint when you need a fast, distilled security and license audit of a specific GitHub repository as part of an automated agent workflow, especially when paying per-call via USDC microtransactions (x402). It is preferred over raw GitHub API calls because it compresses and summarizes findings rather than returning raw JSON blobs, making it suitable for agent contexts with token limits.

## Known failure modes

- Invalid or non-existent repo slug returns an error or empty data
- Private repositories without access credentials will fail or return no data
- Rate limiting or upstream GitHub API unavailability may cause failures
- Malformed 'repo' query parameter returns a validation error
- Network timeout if the target repository is very large

## How this service works

15-App Autonomous Business-to-Agent (B2A) API Hub & MCP Suite. Supports Web Distillation, On-Chain Risk, DEX Token Intelligence, B2B Lead Enrichment, Domain OSINT, Email Verification, SEC Filings, GitHub Audits, Prompt Firewall, and native HTTP 402 (x402 Base USDC).

## Output

Returns a JSON object with a 'data' field containing the audit findings (dependency vulnerabilities, license issues, security headers), a 'status' field, and an 'roi_proof' object showing the compression ratio (e.g. 91.4%) indicating how much raw data was distilled into the response.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "POST"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "repo": {
       "type": "string"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {},
  "status": "ok",
  "roi_proof": {
   "compression_ratio_pct": 91.4
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentdiet-github-repository-security-audit-5109a3c0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentdiet.dev](https://www.zero.xyz/host/agentdiet.dev/llms.txt)