Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .claude-plugin/marketplace.json
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@
"AppSec",
"OSS Upgrade Investigator"
],
"version": "2.2.0"
"version": "2.2.1"
},
{
"author": {
Expand Down
14 changes: 13 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,12 +3,24 @@
All notable changes to Endor Labs Agent Kit and the generated `ai-plugins`
distribution are tracked here.

The current generated package version is `2.2.0`. Merging to `main` does not
The current generated package version is `2.2.1`. Merging to `main` does not
automatically increment this version. Maintainers bump `pyproject.toml`
intentionally for a release, regenerate artifacts, and use the same version
across Claude Code, Codex, Gemini CLI, Antigravity CLI, Cursor, and Cursor SDK
package metadata.

## 2.2.1 - 2026-08-01

### Changed

- Removed unused private QA and backend telemetry evidence inputs from
automated `ai-plugins` publication.

### Fixed

- Normalized Codex Plugins Directory skill metadata so generated submission
packages pass OpenAI's text-normalization validation without manual ZIP edits.

## 2.2.0 - 2026-07-30

### Added
Expand Down
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ support context.
> shape, guardrails, tests, and source documentation are owned by
> [🐙 The Endor Labs Agent Kit](https://github.com/endorlabs/endor-labs-agent-kit/tree/main).

Current generated Agent Kit package version: `2.2.0`. Agent Kit maintainer
Current generated Agent Kit package version: `2.2.1`. Agent Kit maintainer
merges open or update generated distribution PRs in this repo, but they do not
automatically bump package versions. Version bumps are intentional release
actions from the source repo.
Expand Down
2 changes: 1 addition & 1 deletion cursor-sdk/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

<!-- Generated by Endor Labs Agent Kit. Do not hand-edit. -->

Version: `2.2.0`
Version: `2.2.1`

This package runs Endor Labs Agent Kit workflows through Cursor's Python SDK.
Use it for automation, CI, backend services, orchestration, and scripted local or cloud runs.
Expand Down
2 changes: 1 addition & 1 deletion cursor-sdk/agent_definitions.json
Original file line number Diff line number Diff line change
Expand Up @@ -127,5 +127,5 @@
"package": "endor-labs-agent-kit-cursor-sdk",
"schema_version": 1,
"sdk": "cursor-python",
"version": "2.2.0"
"version": "2.2.1"
}
10 changes: 5 additions & 5 deletions plugins/antigravity/endor-labs-agent-kit/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

<!-- Generated by Endor Labs Agent Kit. Do not hand-edit. -->

Version: `2.2.0`
Version: `2.2.1`

This generated Antigravity CLI plugin package includes Endor Labs setup
support, Antigravity Agent Skills, and Antigravity subagents generated
Expand Down Expand Up @@ -44,12 +44,12 @@ Agent Kit does not block compatible customer-selected host models.
## Install From The Public Release

```bash
git clone --branch 2.2.0 https://github.com/endorlabs/ai-plugins.git endor-ai-plugins-2.2.0
agy plugin validate ./endor-ai-plugins-2.2.0/plugins/antigravity/endor-labs-agent-kit
agy plugin install ./endor-ai-plugins-2.2.0/plugins/antigravity/endor-labs-agent-kit
git clone --branch 2.2.1 https://github.com/endorlabs/ai-plugins.git endor-ai-plugins-2.2.1
agy plugin validate ./endor-ai-plugins-2.2.1/plugins/antigravity/endor-labs-agent-kit
agy plugin install ./endor-ai-plugins-2.2.1/plugins/antigravity/endor-labs-agent-kit
```

The `--branch 2.2.0` argument checks out the immutable `2.2.0` release tag;
The `--branch 2.2.1` argument checks out the immutable `2.2.1` release tag;
it does not require a same-named branch.

## Install From A Local Checkout
Expand Down
2 changes: 1 addition & 1 deletion plugins/claude/.claude-plugin/marketplace.json
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@
"AppSec",
"OSS Upgrade Investigator"
],
"version": "2.2.0"
"version": "2.2.1"
},
{
"author": {
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -20,5 +20,5 @@
],
"name": "endor-labs-agent-kit",
"repository": "https://github.com/endorlabs/ai-plugins",
"version": "2.2.0"
"version": "2.2.1"
}
2 changes: 1 addition & 1 deletion plugins/claude/endor-labs-agent-kit/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

<!-- Generated by Endor Labs Agent Kit. Do not hand-edit. -->

Version: `2.2.0`
Version: `2.2.1`

This generated Claude Code plugin package includes Endor Labs setup
support and the 11 canonical Claude Code workflow agents generated from source recipes in the
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -37,5 +37,5 @@
"name": "endor-labs-agent-kit",
"repository": "https://github.com/endorlabs/ai-plugins",
"skills": "./skills/",
"version": "2.2.0"
"version": "2.2.1"
}
Original file line number Diff line number Diff line change
@@ -1,17 +1,11 @@
---
name: ai-sast-remediation
description: |
Triages Endor AI SAST findings using exploit-reproduction evidence,
data-flow context, and remediation guidance to distinguish actionable
vulnerabilities from noise. It can prepare targeted code fixes and, after
explicit approval, edit files and open change requests. For exception
workflows, it can create or update scoped Endor exception policies only
after verified AppSec approval and explicit user confirmation.
description: "Triages Endor AI SAST findings using exploit-reproduction evidence, data-flow context, and remediation guidance to distinguish actionable vulnerabilities from noise. It can prepare targeted code fixes and, after explicit approval, edit files and open change requests. For exception workflows, it can create or update scoped Endor exception policies only after verified AppSec approval and explicit user confirmation."
---

# AI SAST Remediation

Generated from Endor Agent Kit recipe `ai-sast-remediation` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `ai-sast-remediation` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,18 +1,11 @@
---
name: cicd-posture
description: |
Assesses CI/CD and software supply-chain security across an Endor namespace,
GitHub organization, selected repositories, or the current repository. It
combines existing Endor SCPM, CI/CD, GitHub Actions, and supply-chain
findings with read-only repository configuration evidence and optional local
CI inspection to produce deterministic scores, critical overrides,
prioritized improvements, and explicit data gaps. It does not modify Endor,
GitHub, or repository state.
description: "Assesses CI/CD and software supply-chain security across an Endor namespace, GitHub organization, selected repositories, or the current repository. It combines existing Endor SCPM, CI/CD, GitHub Actions, and supply-chain findings with read-only repository configuration evidence and optional local CI inspection to produce deterministic scores, critical overrides, prioritized improvements, and explicit data gaps. It does not modify Endor, GitHub, or repository state."
---

# CI/CD And Supply Chain Posture

Generated from Endor Agent Kit recipe `cicd-posture` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `cicd-posture` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,16 +1,11 @@
---
name: configuration-automation
description: |
Compares GitHub repository inventory with Endor projects, GitHub App
coverage, monitored branches, scan profiles, package-manager integrations,
dependency resolution, and reachability evidence. It identifies onboarding
and configuration gaps and provides targeted setup instructions without
changing GitHub, Endor, or source repositories.
description: "Compares GitHub repository inventory with Endor projects, GitHub App coverage, monitored branches, scan profiles, package-manager integrations, dependency resolution, and reachability evidence. It identifies onboarding and configuration gaps and provides targeted setup instructions without changing GitHub, Endor, or source repositories."
---

# Configuration Automation

Generated from Endor Agent Kit recipe `configuration-automation` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `configuration-automation` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,16 +1,11 @@
---
name: dependency-reviewer
description: |
Evaluates an exact package version, summarizes package risk, or reviews
dependencies declared by a repository through one focused workflow. It uses
available vulnerability, malware, package-health, license, policy, and Endor
evidence to provide a read-only recommendation and clearly identify missing
information.
description: "Evaluates an exact package version, summarizes package risk, or reviews dependencies declared by a repository through one focused workflow. It uses available vulnerability, malware, package-health, license, policy, and Endor evidence to provide a read-only recommendation and clearly identify missing information."
---

# Dependency Reviewer

Generated from Endor Agent Kit recipe `dependency-reviewer` v1.0.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `dependency-reviewer` v1.0.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,12 +1,10 @@
---
name: endor-agent-kit-setup
description: |
Use when checking Endor Agent Kit readiness in Codex, verifying the
local Endor CLI, authentication, namespace, GitHub, or toolchain prerequisites.
description: "Use when checking Endor Agent Kit readiness in Codex, verifying the local Endor CLI, authentication, namespace, GitHub, or toolchain prerequisites."
---

<!-- Generated by Endor Labs Agent Kit. Do not hand-edit installed copies. -->
<!-- endor_agent_kit_managed=true agent_id=endor-agent-kit-setup host=codex-directory package=endor-labs-agent-kit version=2.2.0 -->
<!-- endor_agent_kit_managed=true agent_id=endor-agent-kit-setup host=codex-directory package=endor-labs-agent-kit version=2.2.1 -->

# Endor Agent Kit Setup For Codex

Expand Down
Original file line number Diff line number Diff line change
@@ -1,15 +1,11 @@
---
name: findings-browser
description: |
Browses, filters, and summarizes existing Endor findings without starting
new scans or performing remediation. It shows the applied scope and filters,
relevant severity and reachability context, pagination or truncation limits,
and any evidence gaps affecting the results.
description: "Browses, filters, and summarizes existing Endor findings without starting new scans or performing remediation. It shows the applied scope and filters, relevant severity and reachability context, pagination or truncation limits, and any evidence gaps affecting the results."
---

# Findings Browser

Generated from Endor Agent Kit recipe `findings-browser` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `findings-browser` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,18 +1,11 @@
---
name: malware-responder
description: |
Correlates current software supply-chain malware intelligence for affected
packages and versions with Endor inventory across a namespace and its child
namespaces. It distinguishes confirmed exposure, possible exposure,
not-observed exposure, and insufficient data using exact package, version,
and inventory evidence. It reports affected projects, indicators of
compromise, containment guidance, and recommended follow-up actions without
modifying Endor or source systems.
description: "Correlates current software supply-chain malware intelligence for affected packages and versions with Endor inventory across a namespace and its child namespaces. It distinguishes confirmed exposure, possible exposure, not-observed exposure, and insufficient data using exact package, version, and inventory evidence. It reports affected projects, indicators of compromise, containment guidance, and recommended follow-up actions without modifying Endor or source systems."
---

# Malware Responder

Generated from Endor Agent Kit recipe `malware-responder` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `malware-responder` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,16 +1,11 @@
---
name: oss-upgrade-investigator
description: |
Evaluates candidate dependency upgrades using Endor VersionUpgrade data,
Code Impact Analysis, findings, breaking-change information, and
Endor-provided manifest targets. It compares findings fixed or introduced
and explains the safest available upgrade path, including whether to upgrade
now, proceed cautiously, defer, or gather more evidence.
description: "Evaluates candidate dependency upgrades using Endor VersionUpgrade data, Code Impact Analysis, findings, breaking-change information, and Endor-provided manifest targets. It compares findings fixed or introduced and explains the safest available upgrade path, including whether to upgrade now, proceed cautiously, defer, or gather more evidence."
---

# OSS Upgrade Investigator

Generated from Endor Agent Kit recipe `oss-upgrade-investigator` v1.0.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `oss-upgrade-investigator` v1.0.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,16 +1,11 @@
---
name: remediation-planning
description: |
Previews safe remediation options for existing Endor findings without
changing code or opening a pull request. It compares VersionUpgrade and
Upgrade Impact Analysis candidates using findings fixed, upgrade risk,
compatibility evidence, and available data, then recommends the safest
evidence-backed next step.
description: "Previews safe remediation options for existing Endor findings without changing code or opening a pull request. It compares VersionUpgrade and Upgrade Impact Analysis candidates using findings fixed, upgrade risk, compatibility evidence, and available data, then recommends the safest evidence-backed next step."
---

# Remediation Planning

Generated from Endor Agent Kit recipe `remediation-planning` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `remediation-planning` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,17 +1,11 @@
---
name: sca-remediation
description: |
Plans and applies dependency-vulnerability fixes using Endor SCA findings,
VersionUpgrade and Upgrade Impact Analysis evidence, deterministic risk
decisions, and local validation. It separates low-risk changes from upgrades
requiring deeper compatibility review and requires explicit approval before
editing files, pushing branches, opening change requests, or creating
tickets.
description: "Plans and applies dependency-vulnerability fixes using Endor SCA findings, VersionUpgrade and Upgrade Impact Analysis evidence, deterministic risk decisions, and local validation. It separates low-risk changes from upgrades requiring deeper compatibility review and requires explicit approval before editing files, pushing branches, opening change requests, or creating tickets."
---

# SCA Remediation

Generated from Endor Agent Kit recipe `sca-remediation` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `sca-remediation` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,16 +1,11 @@
---
name: troubleshooting
description: |
Diagnoses Endor setup, authentication, integration, scanning,
dependency-resolution, container, reachability, policy, and workflow
problems. It gathers the smallest useful set of read-only evidence needed to
identify the likely root cause and recommend the lowest-friction repair
without modifying Endor, source-provider, or repository state.
description: "Diagnoses Endor setup, authentication, integration, scanning, dependency-resolution, container, reachability, policy, and workflow problems. It gathers the smallest useful set of read-only evidence needed to identify the likely root cause and recommend the lowest-friction repair without modifying Endor, source-provider, or repository state."
---

# Troubleshooting

Generated from Endor Agent Kit recipe `troubleshooting` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `troubleshooting` v0.1.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
@@ -1,17 +1,11 @@
---
name: vulnerability-explainer
description: |
Explains a CVE, GHSA, or Endor vulnerability, optionally in the context of a
supplied package and version. It summarizes severity, exploitability
signals, affected and fixed versions, recommended remediation, and relevant
reachability or repository context when supported by exact Endor evidence.
It clearly identifies missing information rather than inferring package or
project applicability.
description: "Explains a CVE, GHSA, or Endor vulnerability, optionally in the context of a supplied package and version. It summarizes severity, exploitability signals, affected and fixed versions, recommended remediation, and relevant reachability or repository context when supported by exact Endor evidence. It clearly identifies missing information rather than inferring package or project applicability."
---

# Vulnerability Explainer

Generated from Endor Agent Kit recipe `vulnerability-explainer` v1.0.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.0.
Generated from Endor Agent Kit recipe `vulnerability-explainer` v1.0.0 for Endor Labs Agent Kit Universal Plugins Directory plugin; package `endor-labs-agent-kit` v2.2.1.
Source-first generated artifact; update source and republish instead of hand-editing installed copies.

## Codex Host Contract
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -37,5 +37,5 @@
"name": "endor-labs-agent-kit",
"repository": "https://github.com/endorlabs/ai-plugins",
"skills": "./skills/",
"version": "2.2.0"
"version": "2.2.1"
}
2 changes: 1 addition & 1 deletion plugins/codex/endor-labs-agent-kit/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

<!-- Generated by Endor Labs Agent Kit. Do not hand-edit. -->

Version: `2.2.0`
Version: `2.2.1`

This generated Codex plugin package includes Endor Labs setup support,
one setup skill, optional workflow-skill fallbacks, and bundled Codex
Expand Down
Loading
Loading