skills.rest
endorlabs
endorlabsOFFICIAL
Explore all skills by this author →
Website𝕏@EndorLabsGitHub

endor-explain

Fetch CVE or Finding details and assess project impact via dependencies.

2|Updated Feb 4, 2026
Search Tags:#security#vulnerability#cve#explain#explainer#finding
One-click install
npx skills add https://github.com/endorlabs/skills-ideas --skill endor-explain-endorlabs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endor-explain
Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-explain
Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-explain-endorlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Vulnerabilities like CVEs and findings are often complex and scattered across sources. This skill consolidates vulnerability details into a clear, actionable explanation for developers and security teams, enabling faster risk understanding and decision-making.

Core Features & Use Cases

  • Retrieve detailed CVE or finding information, including severity, CVSS score, CWE, and publication date.
  • Assess project impact by checking dependencies and manifests to determine affected versions.
  • Present structured guidance with impact, attack vectors, and remediation steps to plan response.

Quick Start

Explain a CVE or finding query by requesting vulnerability details and I will fetch and summarize the information.

Frequently Asked Questions about endor-explain

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I explain a CVE vulnerability and check if my project is affected?▼

To explain a CVE vulnerability, provide the CVE ID or Finding UUID. The skill fetches severity, CWE, and publication date, then cross-checks your dependencies and manifests to determine affected components and present remediation guidance.

What details are included when explaining a CVE finding?▼

Explaining a CVE finding yields a structured summary including severity, CVSS score, CWE, publication date, affected versions, impact assessment, attack vectors, and step-by-step remediation guidance for planning your response.

How does a vulnerability explainer assess project impact from a CVE ID?▼

A vulnerability explainer assesses project impact by cross-checking the specified CVE ID against your project's dependencies and manifests to accurately determine if your codebase contains affected components and versions.

What is the best way to get actionable remediation steps for a CVE?▼

The best way to get actionable remediation steps for a CVE is to query the vulnerability details by CVE ID. The skill consolidates attack vectors and structured guidance to help plan your response.

Can I use a Finding UUID to retrieve vulnerability details instead of a CVE ID?▼

Yes, you can use a Finding UUID to retrieve vulnerability details. The skill accepts either a Finding UUID or a standard CVE ID to fetch and summarize the security information.

Related Skills

Explore More Software Engineering Skills→
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-explain

Explain CVEs and findings with severity, impact, attack vectors, and remediation steps.

Official
Advanced
DonTiziDonTizi
2

security-audit

Scan codebases for secrets, OWASP risks, and vulnerable dependencies.

Community
Advanced
endorlabsendorlabs
2

endor-fix

Identify security vulnerabilities and guide safe upgrade paths for CVEs and findings.

Official
Advanced
naporin0624naporin0624
3

cve-search

Query the NVD CVE database for known vulnerabilities with keyword and severity filters.

Community
Intermediate