Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more.
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “Endor Labs Agent Kit” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 12
- AI SAST Remediation
Triages and remediates Endor AI SAST findings with exploit evidence and approval-gated fixes.
- CI/CD And Supply Chain Posture
Scores CI/CD and supply-chain posture from read-only Endor and repository evidence.
- Configuration Automation
Finds GitHub-to-Endor onboarding and monitored-branch coverage gaps without making changes.
- Dependency Reviewer
Reviews package versions, package risk, or repository dependencies using bounded evidence.
- Endor Agent Kit Setup
Check local Endor Agent Kit readiness
- Findings Browser
Browses and filters existing Endor findings with clear scope, pagination, and evidence gaps.
- Malware Responder
Correlates current malware intelligence with Endor inventory to assess tenant exposure.
- OSS Upgrade Investigator
Compares Endor upgrade candidates, risk, breaking changes, and code impact.
- Remediation Planning
Compares read-only remediation options and recommends the safest evidence-backed next step.
- SCA Remediation
Plans and applies approval-gated SCA fixes with upgrade-risk evidence and local validation.
- Troubleshooting
Diagnoses Endor setup and workflow problems using focused read-only evidence.
- Vulnerability Explainer
Explains vulnerability severity, exploitability, affected versions, and recommended remediation.
Things to ask
- “Use the SCA remediation agent to fix the P0 findings in this repo for my tenant.”
- “Triage the top AI SAST findings for my repo and propose a PR to fix them.”
- “Plan a safe dependency remediation using Endor Labs evidence.”
Disconnect or uninstall
- 1In ChatGPT
Disconnect an account in Settings → Apps or Plugins. To remove the plugin itself, open Endor Labs Agent Kit in the Plugin Directory and select Uninstall plugin. Uninstalling can disconnect every account connected through it, and plugins your workspace installs may not offer the option.
- 2In Codex
Run /plugins in the Codex CLI, select the plugin and uninstall it, or press Space to turn it off.