# Endor Labs Agent Kit (ChatGPT Plugin)

> Endor Labs Agentic AppSec

- Type: plugin
- Publisher: Endor Labs (official)
- Categories: Security, AI & ML
- Website: https://chatgpt.com/plugins/plugins_6a6ceacd1df481918fc5f6abe65e439c
- Open in ChatGPT: https://chatgpt.com/plugins/plugins_6a6ceacd1df481918fc5f6abe65e439c
- Version: 2.2.2
- Listed: 2026-10-15

## About

Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more.

## Install

1. **Add it in ChatGPT** Open Plugins in the ChatGPT sidebar (web or desktop), search for “Endor Labs Agent Kit” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

## Skills

- **AI SAST Remediation**: Triages and remediates Endor AI SAST findings with exploit evidence and approval-gated fixes.
- **CI/CD And Supply Chain Posture**: Scores CI/CD and supply-chain posture from read-only Endor and repository evidence.
- **Configuration Automation**: Finds GitHub-to-Endor onboarding and monitored-branch coverage gaps without making changes.
- **Dependency Reviewer**: Reviews package versions, package risk, or repository dependencies using bounded evidence.
- **Endor Agent Kit Setup**: Check local Endor Agent Kit readiness
- **Findings Browser**: Browses and filters existing Endor findings with clear scope, pagination, and evidence gaps.
- **Malware Responder**: Correlates current malware intelligence with Endor inventory to assess tenant exposure.
- **OSS Upgrade Investigator**: Compares Endor upgrade candidates, risk, breaking changes, and code impact.
- **Remediation Planning**: Compares read-only remediation options and recommends the safest evidence-backed next step.
- **SCA Remediation**: Plans and applies approval-gated SCA fixes with upgrade-risk evidence and local validation.
- **Troubleshooting**: Diagnoses Endor setup and workflow problems using focused read-only evidence.
- **Vulnerability Explainer**: Explains vulnerability severity, exploitability, affected versions, and recommended remediation.

## Example prompts

- "Use the SCA remediation agent to fix the P0 findings in this repo for my tenant."
- "Triage the top AI SAST findings for my repo and propose a PR to fix them."
- "Plan a safe dependency remediation using Endor Labs evidence."

## Related

- [Codex Security](https://chatgptplugins.directory/plugins/codex-security.md): Security scanning for your codebase
- [NVIDIA](https://chatgptplugins.directory/plugins/nvidia.md): Guided help for NVIDIA AI, GPU, robotics, simulation, and 3D workflows.
- [OpenAI Developers](https://chatgptplugins.directory/plugins/openai-developers.md): Develop AI apps, agents, and ChatGPT Apps with OpenAI best practices
- [Plugin Eval](https://chatgptplugins.directory/plugins/plugin-eval.md): Start from chat, then evaluate or benchmark locally
- [Static Analysis (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-static-analysis.md): CodeQL, Semgrep and SARIF parsing skills for security bug hunting
- [Differential Review (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-differential-review.md): Security-focused review of code diffs with blast-radius estimation

---
Source: https://chatgptplugins.directory/plugins/endor-labs-agent-kit · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.