skills.rest
Endor-Solutions-Architecture
Endor-Solutions-ArchitectureOFFICIAL
Explore all skills by this author →
GitHub

endor-check

Identify known vulnerabilities for software dependencies via Endor Labs MCP.

2|Updated Feb 4, 2026
Search Tags:#security#vulnerability#MCP#software-engineering#dependency#package-check
One-click install
npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-check
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endor-check
Source: https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills/tree/main/.claude/skills/endor-check
Command: npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-check

SYSTEM DOCUMENTATION & REQUIREMENTS

Check if a specific dependency has known vulnerabilities. Provide a package name and optionally a version to get vulnerability information.

What problem does it solve?

It helps developers and security teams quickly determine whether a software dependency has known vulnerabilities, reducing risk from third-party packages and guiding remediation.

Core Features & Use Cases

  • Vulnerability lookup for npm/yarn, Python (pip/poetry), Go modules, Maven, and Gradle dependencies.
  • Version-aware checks to verify specific releases and identify fix versions.
  • Usage scenarios include pre-deployment risk assessment, upgrade impact analysis, and license/health checks using MCP data.

Quick Start

Use the endor-check command with a package name and optional version to retrieve vulnerability information. Example: endor-check lodash 4.17.21

Frequently Asked Questions about endor-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a dependency for known vulnerabilities?▼

To check a dependency for known vulnerabilities, provide the package name and an optional version. The tool queries the Endor Labs MCP data source to identify and report known security issues for that specific software package.

Can I scan npm, Python, Go, and Maven packages for security issues?▼

Yes, you can scan npm, Python, Go, Maven, and Gradle packages for security issues. The vulnerability lookup supports these common ecosystems to help assess third-party package risks across different development environments.

How do I find the fix version for a vulnerable package?▼

To find the fix version for a vulnerable package, perform a version-aware check by including the specific release number. The vulnerability report identifies known issues and guides remediation by indicating secure versions.

Does the vulnerability check rely on external websites to fetch results?▼

No, the vulnerability check does not rely on external websites. All vulnerability results come directly from the Endor Labs MCP tool, ensuring consistent checks for software dependencies without external web dependencies.

What is the best way to assess pre-deployment risk for third-party packages?▼

The best way to assess pre-deployment risk for third-party packages is to run a vulnerability lookup before integration. Providing the package name and version scopes the check to verify specific releases and identify known security risks.

Related Skills

Explore More Software Engineering Skills→
maestria-comaestria-co

dependency-management

Automates dependency discovery, auditing, and safe, sequential updates across ecosystems with full test runs and rollback plans.

Official
Advanced
khoabdkhoabd

deal-with-security-advisory

Coordinate confidential GitHub Security Advisory responses and synchronized patch releases.

Community
Advanced
pohlai88pohlai88

dependency-audit

Audit monorepo dependencies for vulnerabilities, license issues, and version drift.

Community
Advanced
transilienceaitransilienceai
462

cve-testing

Coordinate CVE vulnerability testing across identified technology stacks and APIs.

Official
Basic