How do I install the Endor Help skill?

Run npx skillmds@latest add endorlabs/endor-help in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Endor Help safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Endor Help?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Endor Help free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Endor Help?

endorlabs (@endorlabs) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Endor Help by endorlabs — Agent Skill

Name: Endor Help
Rating: 4.2 (5 reviews)
Author: endorlabs

Endor Help

Quick reference for all available Endor Labs commands. Use when the user says "endor help", "what commands are available", "endor usage", "what can endor do", or wants to discover available security scanning capabilities. Do NOT use when the user already knows which specific command they want — route to that skill directly.

endorlabs dc03238 2.8 KB Updated Sep 10, 2026

File contents

Endor Labs Command Reference

Present this reference to the user:

## Endor Labs Commands

### Getting Started
| Command | Description |
|---------|-------------|
| `/endor` | Natural language assistant |
| `/endor-setup` | First-time setup (install, auth, configure) |
| `/endor-demo` | Try without an account |
| `/endor-help` | This reference |

### Scanning
| Command | Description |
|---------|-------------|
| `/endor-scan` | Quick security scan (seconds) |
| `/endor-scan-full` | Full scan with reachability (minutes) |
| `/endor-sca` | Dependency vulnerability scan (SCA) |
| `/endor-sast` | Static application security testing |
| `/endor-ai-sast` | View AI-powered SAST findings |
| `/endor-secrets` | Scan for exposed secrets |
| `/endor-ghactions` | GitHub Actions workflow security |
| `/endor-container` | Scan container images and Dockerfiles |

### Dependency Analysis
| Command | Description |
|---------|-------------|
| `/endor-check <pkg>` | Check dependency for vulnerabilities |
| `/endor-score <pkg>` | View package health scores |
| `/endor-upgrade-impact <pkg>` | Analyze upgrade impact |
| `/endor-license` | Check license compliance |

### Findings & Remediation
| Command | Description |
|---------|-------------|
| `/endor-findings` | View findings with filters |
| `/endor-fix <CVE>` | Remediation guidance |
| `/endor-explain <CVE>` | Detailed CVE/finding info |
| `/endor-troubleshoot` | Diagnose scan errors |

### Compliance & Governance
| Command | Description |
|---------|-------------|
| `/endor-review` | Pre-PR security review |
| `/endor-sbom` | SBOM management |
| `/endor-policy` | Security policy management |
| `/endor-validate-policy` | Validate policy against a project |
| `/endor-cicd` | Generate CI/CD pipelines |

### Advanced
| Command | Description |
|---------|-------------|
| `/endor-api` | Custom API queries |

### Quick Examples

/endor-scan # Quick scan /endor-ghactions # Workflow & action security /endor-check lodash 4.17.15 # Check version /endor-fix CVE-2021-23337 # Fix a vuln /endor-findings critical reachable # Filter findings /endor-review # Pre-PR check


### Tips
- `/endor-scan` for quick overview, `/endor-scan-full` before releases
- `/endor-review` before PRs, `/endor-score` before adding deps
- `/endor-troubleshoot` when scans fail

If the user asks about a specific command, provide detailed usage for that command only.

---name: endor-helpdescription: Quick reference for all available Endor Labs commands. Use when the user says "endor help", "what commands are available", "endor usage", "what can endor do", or wants to discover available security scanning capabilities. Do NOT use when the user already knows which specific command they want — route to that skill directly.---# Endor Labs Command ReferencePresent this reference to the user:```markdown## Endor Labs Commands### Getting Started| Command | Description ||---------|-------------|| `/endor` | Natural language assistant || `/endor-setup` | First-time setup (install, auth, configure) || `/endor-demo` | Try without an account || `/endor-help` | This reference |### Scanning| Command | Description ||---------|-------------|| `/endor-scan` | Quick security scan (seconds) || `/endor-scan-full` | Full scan with reachability (minutes) || `/endor-sca` | Dependency vulnerability scan (SCA) || `/endor-sast` | Static application security testing || `/endor-ai-sast` | View AI-powered SAST findings || `/endor-secrets` | Scan for exposed secrets || `/endor-ghactions` | GitHub Actions workflow security || `/endor-container` | Scan container images and Dockerfiles |### Dependency Analysis| Command | Description ||---------|-------------|| `/endor-check <pkg>` | Check dependency for vulnerabilities || `/endor-score <pkg>` | View package health scores || `/endor-upgrade-impact <pkg>` | Analyze upgrade impact || `/endor-license` | Check license compliance |### Findings & Remediation| Command | Description ||---------|-------------|| `/endor-findings` | View findings with filters || `/endor-fix <CVE>` | Remediation guidance || `/endor-explain <CVE>` | Detailed CVE/finding info || `/endor-troubleshoot` | Diagnose scan errors |### Compliance & Governance| Command | Description ||---------|-------------|| `/endor-review` | Pre-PR security review || `/endor-sbom` | SBOM management || `/endor-policy` | Security policy management || `/endor-validate-policy` | Validate policy against a project || `/endor-cicd` | Generate CI/CD pipelines |### Advanced| Command | Description ||---------|-------------|| `/endor-api` | Custom API queries |### Quick Examples```/endor-scan # Quick scan/endor-ghactions # Workflow & action security/endor-check lodash 4.17.15 # Check version/endor-fix CVE-2021-23337 # Fix a vuln/endor-findings critical reachable # Filter findings/endor-review # Pre-PR check```### Tips- `/endor-scan` for quick overview, `/endor-scan-full` before releases- `/endor-review` before PRs, `/endor-score` before adding deps- `/endor-troubleshoot` when scans fail```If the user asks about a specific command, provide detailed usage for that command only.

Frequently asked questions