endor-scan
Fast security scan of the current repository using Endor Labs. Use when the user says "scan my code", "quick scan", "endor scan", "scan this repo", "run a…
Skills
Find an Agent Skill for your task. Read the guide and copy the install command.
Updated 10-27 00:15
Security & auditing
7,572 results
endor-score
Evaluate open source package health before adoption. Use when the user says "should I use this package", "is lodash well-maintained", "endor score express",…
endor-setup
Onboarding wizard for Endor Labs. Guides users through prerequisites, MCP server configuration, authentication, namespace setup, and running their first scan.…
endor-upgrade-impact
Analyze the impact of upgrading a dependency before you do it. Use when the user says "should I upgrade lodash", "what breaks if I update express", "upgrade…
authenticate-wallet
Sign in to the wallet. Use when you or the user want to log in, sign in, connect, or set up the wallet, or when any wallet operation fails with authentication…
expanso-cross-border-gdpr
GDPR compliance for cross-border data transfers
expanso-encrypt-data
Field-level encryption for sensitive data fields
expanso-encryption-patterns
Multi-field encryption strategies (payment, PII, temporal)
distribution-security
Defense-in-depth, PII protection, secrets scanning, and secure packaging for distributed software
security-review
Defend before attackers find the gaps - OWASP, STRIDE, and Microsoft SFI
security-threat-modeler
Analyze codebase architecture to generate a STRIDE-based threat model with data flow diagrams, trust boundaries, prioritized threats, and mitigations.…
distribution-security
Defense-in-depth, PII protection, secrets scanning, and secure packaging for distributed software
security review skill
Defend before attackers find the gaps - OWASP, STRIDE, and Microsoft SFI
microsoft secure future initiative (sfi) skill
Security-first development practices aligned with Microsoft's SFI.
security review skill
Defend before attackers find the gaps.
learn-reverse-engineering
An interactive tutor for the reverse-engineering track of learning AI engineering from scratch. Learners want to read compiled programs, used to start or continue file formats, disassembly, control flow, representation lifting, evidence, equivalence proofs, calling conventions, compiler idioms, linking, types, debugging, bytecode, diffing, symbolic execution, and AI-assisted analysis. Teach one lesson per invocation and record evidence to…
dependency-audit
Analyzes project dependencies for staleness, known vulnerabilities, license compatibility, and unused packages. Produces an actionable audit report with…
security-guardian
The English introduction is being prepared.
dependabot-alerts
Triage GitHub Dependabot security alerts into one-point GUS work items that bump the outermost consumer. User-invoked only.
repo-hardening
Audit and harden GitHub repository security settings using the gh CLI. Use when the user wants to review or improve repository security posture, enforce branch…
security-hardening
Security best practices for web applications. Covers OWASP Top 10, authentication, authorization, input validation, CSP, and secure headers.
verify-ai-department-package
Independently audit an AI department packet or installable package for workflow fit, authority, topology simplicity, producer-verifier separation, evidence,…
firebase-auth
Firebase Authentication for web and mobile apps. Use for Google-backed auth.
analyzing-ios-app-security-with-objection
Runtime iOS app security testing with Objection (Frida): inspect keychain and filesystem data, explore app internals at runtime, and validate/bypass…