# GitHub Repository Secret Leak & Security Auditor

> GitHub Repository Secret Leak & Security Auditor is a paid API for AI agents from cve-intel.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Scans a GitHub repository for secret leaks, license risk, dependency vulnerabilities, maintenance health, and supply-chain security signals before code execution.

## Facts

- Endpoint: GET https://cve-intel.agentdiet.dev/v1/secret-leak-scan?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: cve-intel.agentdiet.dev
- Website: https://cve-intel.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/cve-intel-agentdiet-dev-github-repository-secret-leak-security-auditor-2027e7aa
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_dEellxZnCsXHxeHAsXadg

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cve-intel-agentdiet-dev-github-repository-secret-leak-security-auditor-2027e7aa
```

Example prompt: Before I add modelcontextprotocol/servers as a dependency, can you scan it for exposed secrets, license risks, and supply-chain vulnerabilities so I know it's safe to use?

## When to prefer this

Choose this endpoint when an AI coding agent needs to vet a GitHub repository before cloning, executing, or integrating its code — especially for supply-chain security checks, secret leak detection, and license compliance. Prefer it over generic CVE databases when you need repository-level holistic analysis combining code secrets, license, maintenance health, and dependency risk in a single call.

## Known failure modes

- Invalid or non-existent repository owner/name format returns an error
- Private repositories that are inaccessible via public GitHub API return access errors
- GitHub API rate limiting may cause temporary failures or incomplete results
- Repositories with very large codebases may have partial scan coverage
- Network timeouts when GitHub is unreachable

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://cve-intel.agentdiet.dev/v1/secret-leak-scan)

## Output

Returns a structured security report for the specified GitHub repository including: detected secret leaks or exposed credentials, license type and associated risk level, dependency vulnerability findings (CVEs), maintenance velocity indicators (commit frequency, last activity), repository popularity signals (stars, forks), and an overall supply-chain security assessment.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cve-intel-agentdiet-dev-github-repository-secret-leak-security-auditor-2027e7aa/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cve-intel.agentdiet.dev](https://www.zero.xyz/host/cve-intel.agentdiet.dev/llms.txt)