skills.rest
endorlabs
endorlabsOFFICIAL
Explore all skills by this author →
Website𝕏@EndorLabsGitHub

ai-sast-triage

Analyze and triage Endor AI SAST findings into context-aware change requests.

10|2|Updated May 4, 2026
Search Tags:#remediation#change request#code repository#security triage#AI SAST
One-click install
npx skills add https://github.com/endorlabs/endor-labs-agent-kit --skill ai-sast-triage
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ai-sast-triage
Source: https://github.com/endorlabs/endor-labs-agent-kit/tree/main/gemini/ai-sast-triage
Command: npx skills add https://github.com/endorlabs/endor-labs-agent-kit --skill ai-sast-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gemini, endorctl-api, endor-api, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the analysis and triage of AI SAST findings, streamlining the process of identifying and remediating security vulnerabilities in code repositories.

Core Features & Use Cases

  • AI SAST Finding Analysis: Parses AI SAST findings from Endor and provides a detailed breakdown of each finding.
  • Exploit Reproduction: Uses exploit reproduction to prioritize and validate findings.
  • Remediation Guidance: Incorporates remediation guidance to create context-aware patches.
  • Change Request Creation: Generates change requests with a full context for review.
  • Exception Policy Creation: Optionally creates exception policies for false positives or accepted risks.
  • Ticket Creation: Optionally creates tickets for further investigation.
  • Use Case: After running an AI SAST scan on your code repository, use this Skill to automatically analyze the findings and create change requests for remediation, without manual intervention.

Quick Start

Use the @ai-sast-triage skill to analyze and triage AI SAST findings for this repository. Do not edit files, open a PR/MR, or create an Endor policy unless I approve the specific gate.

Frequently Asked Questions about ai-sast-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SAST findings triage for my code repository?▼

Automate SAST findings triage by using AI to analyze Endor SAST results, validate vulnerabilities through exploit reproduction, and generate context-aware change requests for code repository remediation.

How does AI exploit reproduction work for security vulnerability triage?▼

Exploit reproduction validates SAST findings by attempting to recreate the exploit path, allowing the triage process to prioritize verified vulnerabilities and filter out false positives before generating remediation guidance.

Do I need an Endor tenant and Gemini CLI to automate SAST remediation?▼

Yes, full functionality requires Gemini CLI and Endor tenant access to fetch AI SAST findings, analyze exploit reproduction data, and generate context-aware change request patches automatically.

Can I create exception policies for false positives during AI SAST analysis?▼

Yes, during AI SAST analysis, you can optionally create exception policies to document false positives or accepted risks, ensuring verified findings are prioritized for change request creation.

What is the best way to generate change requests from SAST findings?▼

Generate change requests from SAST findings by utilizing AI to parse Endor findings, apply remediation guidance, and create context-aware patches with full context for direct repository review.

Why are my SAST findings not automatically opening pull requests?▼

SAST findings do not automatically open pull requests because the skill requires explicit user approval before editing files, opening PRs, or creating Endor exception policies to ensure safe remediation.

Related Skills

Explore More Software Engineering Skills→
endorlabsendorlabs
10

sca-remediation

Automate dependency vulnerability remediation using Endor SCA findings and UIA evidence.

Official
Advanced
robertolopezlopezrobertolopezlopez
1

guided-experience-service-mr-comment-analysis

Analyze unresolved GitLab merge request comments with repository-grounded technical findings.

Community
Advanced
HelloEverybobyHelloEveryboby
17

SDLCOrchestrator

Automate SAST, DAST, and SCA security scans in CI/CD pipelines.

Community
Intermediate
enderphan94enderphan94
1

poc-skill

Generate security proof-of-concept reports with reproduction steps and exploit scripts.

Community
Advanced