# GitHub Repository Security & License Auditor

> GitHub Repository Security & License Auditor is a paid API for AI agents from github-audit.agentdiet.dev, paid per call via MPP, $0.01/call, status unknown (last checked 2026-10-21).

Audits a GitHub repository for license risk, dependency vulnerabilities, maintenance health, and supply-chain security signals before integrating or executing its code.

## Facts

- Endpoint: GET https://github-audit.agentdiet.dev/v1/sbom-auditor?utm_source=zero.xyz
- Price: $0.01/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: github-audit.agentdiet.dev
- Website: https://github-audit.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/github-audit-agentdiet-dev-github-repository-security-license-auditor-e7cd8277
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_uU-R62rjt3PXvna2WVU0G

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability github-audit-agentdiet-dev-github-repository-security-license-auditor-e7cd8277
```

Example prompt: Before I integrate langchain-ai/langgraph into my project, can you audit that GitHub repo for license risks, unmaintained dependencies, and any supply-chain security issues?

## When to prefer this

Choose this endpoint when an AI agent or developer needs to vet a GitHub repository before integrating it as a dependency, running its code, or recommending it — especially when license compatibility, supply-chain risk, and maintenance health all need to be assessed in a single call. Prefer over raw GitHub API calls when you need a pre-processed security summary rather than raw metadata.

## Known failure modes

- Invalid or non-existent repository name returns an error (repo not found)
- Private repositories may not be accessible without authentication
- Rate limiting on GitHub API may cause intermittent failures
- Repositories with no dependency manifests may return incomplete SBOM data
- Malformed owner/name format in the repo parameter causes a validation error

## How this service works

Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/sbom-auditor)

## Output

Returns a structured report including the repository's detected license and associated risk level, maintenance velocity indicators (commit frequency, last commit date), popularity signals (stars, forks), identified dependency vulnerabilities or CVE flags, and overall supply-chain security assessment — giving an agent a go/no-go signal before integrating or executing the code.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "repo"
 ],
 "properties": {
  "repo": {
   "type": "string",
   "minLength": 1,
   "description": "GitHub repository in owner/name format (e.g. modelcontextprotocol/servers or langchain-ai/langgraph)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/github-audit-agentdiet-dev-github-repository-security-license-auditor-e7cd8277/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from github-audit.agentdiet.dev](https://www.zero.xyz/host/github-audit.agentdiet.dev/llms.txt)