skills.rest
endorlabs
endorlabsOFFICIAL
Explore all skills by this author →
Website𝕏@EndorLabsGitHub

endor-ai-sast

Fetch AI-powered SAST findings from the Endor Labs platform.

2|Updated Feb 4, 2026
Search Tags:#security#ai#sast#namespace#project#findings#endorctl
One-click install
npx skills add https://github.com/endorlabs/skills-ideas --skill endor-ai-sast
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endor-ai-sast
Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-ai-sast
Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-ai-sast

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AI-powered SAST findings are fetched from the Endor Labs platform to help you quickly identify security issues in your codebase.

Core Features & Use Cases

  • Retrieve pre-computed AI-driven static analysis findings for a repository, enabling fast triage without running a new scan.
  • Map findings to file paths and provide concise explanations to support remediation planning.
  • Use Case: After authentication and project onboarding, run the skill to view AI SAST results for a given project and quickly prioritize fixes.

Quick Start

Authenticate with Endor Labs and run the AI SAST skill against your project to view pre-computed findings.

Frequently Asked Questions about endor-ai-sast

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fetch AI-powered SAST findings for a specific repository?▼

To fetch AI-powered SAST findings, authenticate with Endor Labs, resolve the namespace, and look up the project UUID via the git URL. The skill then retrieves pre-computed security findings mapped to file paths for remediation planning.

What is AI-powered static analysis and how does it explain code vulnerabilities?▼

AI-powered static analysis identifies security issues in a codebase without running a new scan. It provides concise explanations and severity levels for each finding, helping developers quickly triage and prioritize code fixes.

Do I need to run a new scan to view static analysis security findings?▼

No, you do not need to run a new scan. This skill retrieves pre-computed AI-driven static analysis findings from the Endor Labs platform, enabling fast triage by mapping existing results to file paths and explanations.

Can I use Endor Labs SAST findings without manually configuring the project namespace?▼

No, Endor namespace resolution is required. The skill needs to identify your project via its git URL and namespace to perform a project UUID lookup before it can fetch the AI SAST findings from the API.

What details are included in the AI SAST findings retrieved from Endor Labs?▼

The AI SAST findings include meta descriptions, spec explanations, dependency file paths, and spec severity levels. This data maps vulnerabilities to specific files to support remediation planning.

What is the best way to triage security vulnerabilities after project onboarding?▼

After authenticating and onboarding your project, use the AI SAST skill to view pre-computed findings. It maps security issues to file paths and provides explanations to help you quickly prioritize fixes without scanning.

Related Skills

Explore More Software Engineering Skills→
endorlabsendorlabs
10

findings-browser

Browse and filter Endor Labs findings with severity summaries via the Endor API.

Official
Intermediate
cdalsoniiicdalsoniii

SAST Triage

Triage gosec, golangci-lint, and govulncheck findings by severity and false positives.

Community
Intermediate
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-findings

Filter Endor Labs security findings by severity, reachability, category, and remediation.

Official
Intermediate
0x53c70x53c7
1

generate-test-leads

Generate prioritized security testing leads with CVSSv4 scores from static analysis results.

Official
Advanced