skills.rest
endorlabs
endorlabsOFFICIAL
Explore all skills by this author →
Website𝕏@EndorLabsGitHub

endor-fix

Identify security vulnerabilities and guide safe upgrade paths for CVEs and findings.

2|Updated Feb 4, 2026
Search Tags:#security#vulnerability#remediation#upgrade#cve#dependency#finding
One-click install
npx skills add https://github.com/endorlabs/skills-ideas --skill endor-fix-endorlabs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endor-fix
Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-fix
Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-fix-endorlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

## What problem does it solve? Remediates security vulnerabilities by proposing safe upgrade paths and actionable remediation steps.

## Core Features & Use Cases

  • Identify vulnerabilities by CVE, package name, or finding UUID; fetch upgrade recommendations; present remediation with a deterministic upgrade path and optional apply fix flow.
  • Automate or guide remediation workflows across single and multiple findings for consistent security posture.
  • Integrates with existing workflows to modify manifests and apply upgrades via package managers when approved.

### Quick Start Provide a remediation plan for a CVE or finding, including an upgrade recommendation and steps to apply it.

Frequently Asked Questions about endor-fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I remediate security vulnerabilities by upgrading vulnerable dependencies?▼

To remediate vulnerabilities, you can identify issues by CVE ID, package name, or finding UUID to receive a deterministic upgrade path and actionable steps for your codebase.

What is the best way to fix multiple CVE findings in a package manifest at once?▼

Fixing multiple CVE findings is supported across single and multiple inputs, automating the workflow to modify manifests and apply upgrades via package managers when approved.

Can I automatically apply a safe upgrade path for a vulnerable package?▼

Yes, you can automatically apply safe upgrades; the tool uses upgrade impact data when available to guide an optional apply fix flow that modifies manifests directly through package managers.

Does endor-fix support remediating vulnerabilities using a specific finding UUID?▼

Yes, endor-fix supports remediating vulnerabilities using a finding UUID, alongside CVE IDs and package names, to fetch specific upgrade recommendations and execute remediation workflows.

How does safe upgrade impact data work when triaging vulnerable packages?▼

Safe upgrade impact data evaluates the effect of updating a vulnerable package, providing a deterministic remediation path that ensures your dependency upgrades will not break existing codebase functionality.

Related Skills

Explore More Software Engineering Skills→
djankiesdjankies

reviewing-dependencies

Detect unused, outdated, and vulnerable dependencies in npm projects.

Community
Advanced
ldilovldilov
3

dependency-upgrade-safety

Assess dependency upgrade compatibility risks and generate rollback plans.

Community
Advanced
armanzeroeightarmanzeroeight
29

dependency-audit

Audit project dependencies for known security vulnerabilities using package manager tools.

Community
Intermediate
camoneartcamoneart
5

dependency-upgrade

Coordinate major dependency upgrades with compatibility analysis and staged rollout.

Community
Intermediate