{"audit":{"version":"1.5","generated_at":"2026-10-19T00:59:58.588504+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/github-audit-72343955726.us-central1.run.app","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"github-audit-72343955726.us-central1.run.app","name":"GITHUB-AUDIT — Coding Agent GitHub Repo, Dependency & License Security Auditor","url":"https://github-audit-72343955726.us-central1.run.app/.well-known/agent-card.json"}},"identity":{"provider":{"organization":"AgentDiet B2A Infrastructure","url":"https://github-audit-72343955726.us-central1.run.app"},"registry_verification":null,"signature":{"signed":true,"signature_valid":null}},"protocol":{"version":"1.0","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"live","live_responds":true,"last_status_code":200,"last_elapsed_ms":517,"last_error":null},"track_record":{"first_seen":"2026-10-18T22:22:46.301822+00:00","last_checked":"2026-10-18T22:22:46.301822+00:00","last_seen_ok":"2026-10-18T22:22:46.301822+00:00","checks_total":1,"checks_ok":1,"uptime_pct":100.0,"uptime_window_days":30,"uptime_probes":1,"archived":false,"archived_reason":null},"conformance":{"score":75,"grade":"B","summary":"B-grade: working agent with minor gaps (often unsigned cards or thin metadata).","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":25,"max_points":25,"status":"pass","detail":"Endpoint responds to a negotiated A2A SendMessage probe (answers in ~890 ms)."},{"key":"protocol_version","label":"Protocol version","points":10,"max_points":10,"status":"pass","detail":"Declares A2A 1.0 with supportedInterfaces[] (current v1 card shape)."},{"key":"signature","label":"JWS signature","points":5,"max_points":10,"status":"partial","detail":"Card has a signatures[] entry but we haven't verified it."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 1 probe so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":10,"max_points":10,"status":"pass","detail":"Declares 3 skills with structured metadata."},{"key":"verified_identity","label":"Verified Identity","points":5,"max_points":10,"status":"partial","detail":"Provider declared: AgentDiet B2A Infrastructure (https://github-audit-72343955726.us-central1.run.app). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit."},{"key":"freshness","label":"Freshness + modern flags","points":5,"max_points":5,"status":"pass","detail":"declares 1 modern capability flag(s) (x402); seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":5,"max_points":5,"status":"pass","detail":"Declares mTLS: strongest A2A credential binding."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://github-audit-72343955726.us-central1.run.app/.well-known/agent-card.json"},"skills":[{"id":"github-audit","name":"Coding Agent GitHub Repo, Dependency & License Security Auditor","description":"Evaluates any GitHub repository for license risk, maintenance velocity, stars/forks, and supply-chain security before code execution.","tags":["coding-agent-security","x402","mcp","a2a","github-audit"],"examples":["GET https://github-audit-72343955726.us-central1.run.app/v1/github-audit?repo=modelcontextprotocol/servers"],"inputModes":["application/json","text/plain"],"outputModes":["application/json","text/plain"],"outputSchema":{"type":"object","properties":{"status":{"type":"string"},"data":{"type":"object"}},"required":["status","data"]}},{"id":"github-audit-mcp-tool","name":"audit_github_repository (MCP JSON-RPC)","description":"Execute audit_github_repository directly over MCP Streamable HTTP JSON-RPC 2.0 at https://github-audit-72343955726.us-central1.run.app/mcp/github-audit.","tags":["mcp","jsonrpc","coding-agent-security","github-audit"],"examples":["POST https://github-audit-72343955726.us-central1.run.app/mcp/github-audit tools/call audit_github_repository"],"inputModes":["application/json","text/plain"],"outputModes":["application/json","text/plain"],"outputSchema":{"type":"object","properties":{"status":{"type":"string"},"data":{"type":"object"}},"required":["status","data"]}},{"id":"agent-wallet-status","name":"Check Agent Wallet & Free-Trial Quota","description":"Inspect remaining free-trial calls, prepaid USDC session pass balance, and cumulative ROI savings.","tags":["billing","wallet","x402","quota"],"examples":["GET https://github-audit-72343955726.us-central1.run.app/v1/wallet"],"inputModes":["application/json","text/plain"],"outputModes":["application/json","text/plain"],"outputSchema":{"type":"object","properties":{"status":{"type":"string"},"data":{"type":"object"}},"required":["status","data"]}}],"provenance":[{"source":"submitted","first_seen":"2026-10-18T22:22:46.301822+00:00"}],"recent_probes":[{"fetched_at":"2026-10-18T22:22:46.301822+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":517,"live_responds":true}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-10-19T00:59:58.595225+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/github-audit-72343955726.us-central1.run.app/evidence","dispute_url":"https://agenstry.com/agents/github-audit-72343955726.us-central1.run.app/dispute"},"verification_history":[],"signatures":[{"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnN0cnkuY29tLy53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6ImFnZW50ZmluZGVyLWVzMjU2LTEiLCJ0eXAiOiJKT1NFIn0","signature":"U8rnPha_pxRCUcTXbFYxG8XLx8H2MTCAi5vHoTC6EhNEkqUcLw9c2IISlSfIJZJHj_Sqg_NMqMu0P2FyBaYUag"}]}