# GitHub Repository Security & License Auditor

> GitHub Repository Security & License Auditor is a paid API for AI agents from github-audit.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Audits a GitHub repository for license risk, maintenance velocity, dependency vulnerabilities, and supply-chain security signals before integrating or executing its code.

## Facts

- Endpoint: GET https://github-audit.agentdiet.dev/v1/github?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: github-audit.agentdiet.dev
- Website: https://github-audit.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/github-audit-agentdiet-dev-github-repository-security-license-auditor-8ba1cf13
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__VZTgwICc2Yxdm9xbYq94

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability github-audit-agentdiet-dev-github-repository-security-license-auditor-8ba1cf13
```

Example prompt: Before I add it as a dependency, can you audit the GitHub repo langchain-ai/langgraph for license risk, how actively it's maintained, and any supply-chain security concerns?

## When to prefer this

Choose this endpoint when you need a fast, automated pre-flight security and compliance check on a GitHub repository before integrating it as a dependency, running its code in an agent pipeline, or recommending it to a user. It is particularly valuable for coding agents that autonomously install packages or clone repos, and for compliance workflows requiring license vetting. Prefer this over manual GitHub browsing or generic search when you need structured, machine-readable risk signals in a single call.

## Known failure modes

- Invalid or non-existent repo slug returns an error (repo not found)
- Private repositories that are inaccessible return an authorization error
- GitHub API rate-limit exceeded results in a transient error response
- Malformed owner/name format (e.g. missing slash) causes a validation error
- Payment failure via x402 returns HTTP 402 before any audit is performed

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/github)

## Output

Returns a structured report on the GitHub repository covering: license type and associated risk level, maintenance velocity metrics (commit frequency, last activity), community signals (stars, forks), and supply-chain security findings such as dependency vulnerabilities and suspicious patterns.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/github-audit-agentdiet-dev-github-repository-security-license-auditor-8ba1cf13/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from github-audit.agentdiet.dev](https://www.zero.xyz/host/github-audit.agentdiet.dev/llms.txt)