Endor Labs Agent Kit

What you can ask

• Use the SCA remediation agent to fix the P0 findings in this repo for my tenant.Copy

  · SCA Remediation skill

• Triage the top AI SAST findings for my repo and propose a PR to fix them.
• Plan a safe dependency remediation using Endor Labs evidence.

Skills

12 in the ChatGPT listing

• AI SAST RemediationTriages Endor AI SAST findings using exploit-reproduction evidence, data-flow context, and remediation guidance to distinguish actionable vulnerabilities from noise.
• CI/CD And Supply Chain PostureAssesses CI/CD and software supply-chain security across an Endor namespace, GitHub organization, selected repositories, or the current repository.
• Configuration AutomationCompares GitHub repository inventory with Endor projects, GitHub App coverage, monitored branches, scan profiles, package-manager integrations, dependency resolution, and reachability evidence.
• Dependency ReviewerEvaluates an exact package version, summarizes package risk, or reviews dependencies declared by a repository through one focused workflow.
• Endor Agent Kit SetupUse when checking Endor Agent Kit readiness in Codex, verifying the local Endor CLI, authentication, namespace, GitHub, or toolchain prerequisites.
• Findings BrowserBrowses, filters, and summarizes existing Endor findings without starting new scans or performing remediation.
• Malware ResponderCorrelates current software supply-chain malware intelligence for affected packages and versions with Endor inventory across a namespace and its child namespaces.
• OSS Upgrade InvestigatorEvaluates candidate dependency upgrades using Endor VersionUpgrade data, Code Impact Analysis, findings, breaking-change information, and Endor-provided manifest targets.
• Remediation PlanningPreviews safe remediation options for existing Endor findings without changing code or opening a pull request.
• SCA RemediationPlans and applies dependency-vulnerability fixes using Endor SCA findings, VersionUpgrade and Upgrade Impact Analysis evidence, deterministic risk decisions, and local validation.
• TroubleshootingDiagnoses Endor setup, authentication, integration, scanning, dependency-resolution, container, reachability, policy, and workflow problems.
• Vulnerability ExplainerExplains a CVE, GHSA, or Endor vulnerability, optionally in the context of a supplied package and version.