endor-fix

Identify security vulnerabilities and guide safe upgrade paths for CVEs and findings.

2|Updated Feb 4, 2026

Search Tags:#security #vulnerability #remediation #upgrade #cve #dependency #finding

Ready to run

npx skills add https://github.com/endorlabs/skills-ideas --skill endor-fix-endorlabs

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: endor-fix
Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-fix
Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-fix-endorlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

## What problem does it solve? Remediates security vulnerabilities by proposing safe upgrade paths and actionable remediation steps.

## Core Features & Use Cases

Identify vulnerabilities by CVE, package name, or finding UUID; fetch upgrade recommendations; present remediation with a deterministic upgrade path and optional apply fix flow.
Automate or guide remediation workflows across single and multiple findings for consistent security posture.
Integrates with existing workflows to modify manifests and apply upgrades via package managers when approved.

### Quick Start Provide a remediation plan for a CVE or finding, including an upgrade recommendation and steps to apply it.

Frequently Asked Questions about endor-fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I remediate security vulnerabilities by upgrading vulnerable dependencies?▼

To remediate vulnerabilities, you can identify issues by CVE ID, package name, or finding UUID to receive a deterministic upgrade path and actionable steps for your codebase.

What is the best way to fix multiple CVE findings in a package manifest at once?▼

Fixing multiple CVE findings is supported across single and multiple inputs, automating the workflow to modify manifests and apply upgrades via package managers when approved.

Can I automatically apply a safe upgrade path for a vulnerable package?▼

Yes, you can automatically apply safe upgrades; the tool uses upgrade impact data when available to guide an optional apply fix flow that modifies manifests directly through package managers.

Does endor-fix support remediating vulnerabilities using a specific finding UUID?▼

Yes, endor-fix supports remediating vulnerabilities using a finding UUID, alongside CVE IDs and package names, to fetch specific upgrade recommendations and execute remediation workflows.

How does safe upgrade impact data work when triaging vulnerable packages?▼

Safe upgrade impact data evaluates the effect of updating a vulnerable package, providing a deterministic remediation path that ensures your dependency upgrades will not break existing codebase functionality.