Skills
.Work. You
Rest

endor-dependency-finding-provenance

Official

Trace fixes and lineage with confidence.

Software Engineering#vulnerability#provenance#commit analysis#dependency#findings#sbom
Authorendorlabs
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps resolve customer questions about whether a dependency or vulnerability is truly fixed, still present, or mismatched across Findings, PackageVersions, SBOM exports, and related resources.

Core Features & Use Cases

  • Finding provenance: Trace vulnerability evidence back to exact finding UUIDs, target dependency coordinates, file paths, and commit scope.
  • Dependency lineage: Correlate PackageVersion and DependencyMetadata records to verify resolved versus present state for a specific branch or SHA.
  • Artifact reconciliation: Compare API results against CSV or SBOM exports to explain coordinate gaps, missing data, or orphaned related-resource errors.
  • Use case: A customer asks “is this fixed on commit X?” and you need to produce scope, evidence, conclusion, and confidence without mixing namespaces or coordinate families.

Quick Start

Use this skill to investigate a specific project, vulnerability, and commit by tracing the finding and dependency lineage, then summarize whether the issue is present, resolved, or inconclusive.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: endor-dependency-finding-provenance
Download link: https://github.com/endorlabs/endorlabs-sdk/archive/main.zip#endor-dependency-finding-provenance

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 545,000+ vetted skills library on demand.