원클릭으로 Manus에서 모든 스킬 실행

endor-help

스타2

포크0

업데이트2026년 4월 14일 18:23

Quick reference for all available Endor Labs commands. Use when the user says "endor help", "what commands are available", "endor usage", "what can endor do", or wants to discover available security scanning capabilities. Do NOT use when the user already knows which specific command they want — route to that skill directly.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

endorlabs

endorlabs/skills-ideas

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Endor Labs Command Reference

Present this reference to the user:

## Endor Labs Commands

### Getting Started
| Command | Description |
|---------|-------------|
| `/endor` | Natural language assistant |
| `/endor-setup` | First-time setup (install, auth, configure) |
| `/endor-demo` | Try without an account |
| `/endor-help` | This reference |

### Scanning
| Command | Description |
|---------|-------------|
| `/endor-scan` | Quick security scan (seconds) |
| `/endor-scan-full` | Full scan with reachability (minutes) |
| `/endor-sca` | Dependency vulnerability scan (SCA) |
| `/endor-sast` | Static application security testing |
| `/endor-ai-sast` | View AI-powered SAST findings |
| `/endor-secrets` | Scan for exposed secrets |
| `/endor-ghactions` | GitHub Actions workflow security |
| `/endor-container` | Scan container images and Dockerfiles |

### Dependency Analysis
| Command | Description |
|---------|-------------|
| `/endor-check <pkg>` | Check dependency for vulnerabilities |
| `/endor-score <pkg>` | View package health scores |
| `/endor-upgrade-impact <pkg>` | Analyze upgrade impact |
| `/endor-license` | Check license compliance |

### Findings & Remediation
| Command | Description |
|---------|-------------|
| `/endor-findings` | View findings with filters |
| `/endor-fix <CVE>` | Remediation guidance |
| `/endor-explain <CVE>` | Detailed CVE/finding info |
| `/endor-troubleshoot` | Diagnose scan errors |

### Compliance & Governance
| Command | Description |
|---------|-------------|
| `/endor-review` | Pre-PR security review |
| `/endor-sbom` | SBOM management |
| `/endor-policy` | Security policy management |
| `/endor-validate-policy` | Validate policy against a project |
| `/endor-cicd` | Generate CI/CD pipelines |

### Advanced
| Command | Description |
|---------|-------------|
| `/endor-api` | Custom API queries |

### Quick Examples

/endor-scan # Quick scan /endor-ghactions # Workflow & action security /endor-check lodash 4.17.15 # Check version /endor-fix CVE-2021-23337 # Fix a vuln /endor-findings critical reachable # Filter findings /endor-review # Pre-PR check


### Tips
- `/endor-scan` for quick overview, `/endor-scan-full` before releases
- `/endor-review` before PRs, `/endor-score` before adding deps
- `/endor-troubleshoot` when scans fail

If the user asks about a specific command, provide detailed usage for that command only.

이 저장소의 다른 Skills

같은 저장소

endor-ai-sast

endorlabs/skills-ideas

Fetch and display AI-powered SAST findings from the Endor Labs platform. Default path is summary-only (aggregated counts + clusters); full masked listing runs only when the user asks to drill down (speed and token use). Use when the user says "AI SAST results", "AI SAST findings", "AI static analysis", "endor ai sast", "show AI SAST", or wants pre-computed AI-driven code security findings. Do NOT use for running a new SAST scan (/endor-sast), viewing general findings (/endor-findings), or explaining a specific CVE (/endor-explain).

2026-05-072

endor-oss-request

endorlabs/skills-ideas

Trigger ingestion and analysis of a specific open source package version via an Endor Labs OSS dependency request. Use when the user says "trigger OSS dependency request", "request ingestion of <pkg>", "ingest this package", "add this OSS version to Endor", or wants Endor Labs to analyze a package version that isn't yet in the platform. Do NOT use for scanning local code (/endor-scan) or checking an already-ingested package (/endor-check).

2026-04-222

endor-validate-policy

endorlabs/skills-ideas

Validate an Endor Labs policy against a project to test if it matches any findings. Use when the user says "validate policy", "test policy", "does this policy match", "endor validate", "check policy against project", or wants to verify that a policy (finding or exception) correctly targets findings in a specific project before enforcing it. Do NOT use for creating policies (/endor-policy) or viewing findings (/endor-findings).

2026-04-152

endor-policy

endorlabs/skills-ideas

Create and manage Endor Labs security policies for automated enforcement. Use when the user says "create a policy", "block critical vulns", "endor policy", "security gate", "enforcement rules", "exception policy", or wants to define rules for blocking PRs, requiring reviews, or enforcing security standards. Do NOT use for one-time PR review (/endor-review) or viewing findings (/endor-findings).

2026-04-142

endor

endorlabs/skills-ideas

Main Endor Labs security router. Use when the user says "endor", "endor labs", or asks a general security question without specifying a particular endor command. Routes ambiguous requests like "check my security", "help with this dependency", or "what security tools are available" to the right specialized skill. Do NOT use when the user names a specific command like /endor-scan, /endor-check, /endor-fix, etc. — those skills handle themselves directly.

2026-04-142

endor-ghactions

endorlabs/skills-ideas

Scan a repository's GitHub Actions workflows for insecure patterns and vulnerable third-party action versions using Endor Labs. Use when the user says "scan GitHub Actions", "workflow security", "endor ghactions", "insecure CI workflow", "vulnerable action version", "harden my GHA workflows", or focuses on `.github/workflows` without asking for a full dependency or secrets scan. Do NOT use for combined supply chain reports (/endor-supply-chain), generic quick scans (/endor-scan), adding Endor to pipelines (/endor-cicd), or dependency-only checks (/endor-check).

2026-04-092

name	endor-help
description	Quick reference for all available Endor Labs commands. Use when the user says "endor help", "what commands are available", "endor usage", "what can endor do", or wants to discover available security scanning capabilities. Do NOT use when the user already knows which specific command they want — route to that skill directly.

Endor Labs Command Reference

Present this reference to the user:

## Endor Labs Commands

### Getting Started
| Command | Description |
|---------|-------------|
| `/endor` | Natural language assistant |
| `/endor-setup` | First-time setup (install, auth, configure) |
| `/endor-demo` | Try without an account |
| `/endor-help` | This reference |

### Scanning
| Command | Description |
|---------|-------------|
| `/endor-scan` | Quick security scan (seconds) |
| `/endor-scan-full` | Full scan with reachability (minutes) |
| `/endor-sca` | Dependency vulnerability scan (SCA) |
| `/endor-sast` | Static application security testing |
| `/endor-ai-sast` | View AI-powered SAST findings |
| `/endor-secrets` | Scan for exposed secrets |
| `/endor-ghactions` | GitHub Actions workflow security |
| `/endor-container` | Scan container images and Dockerfiles |

### Dependency Analysis
| Command | Description |
|---------|-------------|
| `/endor-check <pkg>` | Check dependency for vulnerabilities |
| `/endor-score <pkg>` | View package health scores |
| `/endor-upgrade-impact <pkg>` | Analyze upgrade impact |
| `/endor-license` | Check license compliance |

### Findings & Remediation
| Command | Description |
|---------|-------------|
| `/endor-findings` | View findings with filters |
| `/endor-fix <CVE>` | Remediation guidance |
| `/endor-explain <CVE>` | Detailed CVE/finding info |
| `/endor-troubleshoot` | Diagnose scan errors |

### Compliance & Governance
| Command | Description |
|---------|-------------|
| `/endor-review` | Pre-PR security review |
| `/endor-sbom` | SBOM management |
| `/endor-policy` | Security policy management |
| `/endor-validate-policy` | Validate policy against a project |
| `/endor-cicd` | Generate CI/CD pipelines |

### Advanced
| Command | Description |
|---------|-------------|
| `/endor-api` | Custom API queries |

### Quick Examples


### Tips
- `/endor-scan` for quick overview, `/endor-scan-full` before releases
- `/endor-review` before PRs, `/endor-score` before adding deps
- `/endor-troubleshoot` when scans fail

If the user asks about a specific command, provide detailed usage for that command only.