# Endor Labs Agent Kit (ChatGPT Plugin)

> Endor Labs Agentic AppSec

- Type: plugin
- Publisher: Endor Labs (official)
- Categories: Security, AI & ML
- Website: https://chatgpt.com/plugins/plugins_6a6ceacd1df481918fc5f6abe65e439c
- Open in ChatGPT: https://chatgpt.com/plugins/plugins_6a6ceacd1df481918fc5f6abe65e439c
- Version: 2.2.2
- Listed: 2026-10-15

## About

Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more.

## Install

1. **Add it in ChatGPT** Open Plugins in the ChatGPT sidebar (web or desktop), search for “Endor Labs Agent Kit” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

## Disconnect or uninstall

1. **In ChatGPT** Disconnect an account in Settings → Apps or Plugins. To remove the plugin itself, open Endor Labs Agent Kit in the Plugin Directory and select Uninstall plugin. Uninstalling can disconnect every account connected through it, and plugins your workspace installs may not offer the option.

2. **In Codex** Run /plugins in the Codex CLI, select the plugin and uninstall it, or press Space to turn it off.

## Skills

- **AI SAST Remediation**: Triages and remediates Endor AI SAST findings with exploit evidence and approval-gated fixes.
- **CI/CD And Supply Chain Posture**: Scores CI/CD and supply-chain posture from read-only Endor and repository evidence.
- **Configuration Automation**: Finds GitHub-to-Endor onboarding and monitored-branch coverage gaps without making changes.
- **Dependency Reviewer**: Reviews package versions, package risk, or repository dependencies using bounded evidence.
- **Endor Agent Kit Setup**: Check local Endor Agent Kit readiness
- **Findings Browser**: Browses and filters existing Endor findings with clear scope, pagination, and evidence gaps.
- **Malware Responder**: Correlates current malware intelligence with Endor inventory to assess tenant exposure.
- **OSS Upgrade Investigator**: Compares Endor upgrade candidates, risk, breaking changes, and code impact.
- **Remediation Planning**: Compares read-only remediation options and recommends the safest evidence-backed next step.
- **SCA Remediation**: Plans and applies approval-gated SCA fixes with upgrade-risk evidence and local validation.
- **Troubleshooting**: Diagnoses Endor setup and workflow problems using focused read-only evidence.
- **Vulnerability Explainer**: Explains vulnerability severity, exploitability, affected versions, and recommended remediation.

## Example prompts

- "Use the SCA remediation agent to fix the P0 findings in this repo for my tenant."
- "Triage the top AI SAST findings for my repo and propose a PR to fix them."
- "Plan a safe dependency remediation using Endor Labs evidence."

## Endor Labs Agent Kit alternatives

- [Codex Security](https://chatgptplugins.directory/plugins/codex-security.md): Security scanning for your codebase
- [NVIDIA](https://chatgptplugins.directory/plugins/nvidia.md): Guided help for NVIDIA AI, GPU, robotics, simulation, and 3D workflows.
- [OpenAI Developers](https://chatgptplugins.directory/plugins/openai-developers.md): Develop AI apps, agents, and ChatGPT Apps with OpenAI best practices
- [Plugin Eval](https://chatgptplugins.directory/plugins/plugin-eval.md): Start from chat, then evaluate or benchmark locally
- [Static Analysis (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-static-analysis.md): CodeQL, Semgrep and SARIF parsing skills for security bug hunting
- [Differential Review (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-differential-review.md): Security-focused review of code diffs with blast-radius estimation

---
Source: https://chatgptplugins.directory/plugins/endor-labs-agent-kit · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.