What is endor-agent-kit-setup-agent?

A setup guide for using Endor security workflows through the Cursor Python SDK. It lists agents for tasks such as vulnerability explanations, dependency reviews, malware response, and troubleshooting.

Use it when connecting Cursor SDK code to Endor agents and deciding which security workflow to call.

It shows which workflows are available and how to call them, without changing your machine, credentials, repository, or security scan settings.

endor-agent-kit-setup-agent — Agent for coding agents by endorlabs: A setup guide for using Endor security workflows through…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add agents/endorlabs/ai-plugins/endor-agent-kit-setup-agent

Clone the repo

git clone --depth 1 https://github.com/endorlabs/ai-plugins

Or install ai-plugins, the plugin that ships this one along with the rest of its 12 skills, 23 agents, 3 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/agents/endorlabs/ai-plugins/endor-agent-kit-setup-agent.svg)](https://agentmods.dev/agents/endorlabs/ai-plugins/endor-agent-kit-setup-agent)

Your own site

<a href="https://agentmods.dev/agents/endorlabs/ai-plugins/endor-agent-kit-setup-agent"><img src="https://agentmods.dev/badge/agents/endorlabs/ai-plugins/endor-agent-kit-setup-agent.svg" alt="Measured on agentmods" height="20"></a>

Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.

When invoked 1,980 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00000	$0.01980
Opus 5	$0.00000	$0.00990
Sonnet 5	$0.00000	$0.00396
Haiku 4.5	$0.00000	$0.00198

Measured 4d ago against content hash 1988d4fc0195, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

endor-agent-kit-setup-agent scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

cursor-sdk/agents/endor-agent-kit-setup-agent.md · 204 lines

How it starts

The opening of the file, as written. The whole thing — 204 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Endor Agent Kit Setup Agent For Cursor SDK

Generated for Cursor Python SDK automation.

Bundled Cursor SDK Workflows

AI SAST Remediation -> SDK agent endor-ai-sast-remediation-agent
CI/CD And Supply Chain Posture -> SDK agent endor-cicd-posture-agent
Configuration Automation -> SDK agent endor-configuration-automation-agent
Dependency Reviewer -> SDK agent endor-dependency-reviewer-agent
Findings Browser -> SDK agent endor-findings-browser-agent
Malware Responder -> SDK agent endor-malware-responder-agent
OSS Upgrade Investigator -> SDK agent endor-oss-upgrade-investigator-agent
Remediation Planning -> SDK agent endor-remediation-planning-agent
SCA Remediation -> SDK agent endor-sca-remediation-agent
Troubleshooting -> SDK agent endor-troubleshooting-agent
Vulnerability Explainer -> SDK agent endor-vulnerability-explainer-agent

Cursor SDK Host Contract

Use this prompt through cursor-sdk/run_cursor_agent.py or equivalent Python SDK code. Setup is readiness guidance only. It must not run endorctl scan, run endorctl host-check, edit shell profiles, install tools, create credentials, mutate repositories, or mutate Endor state. Report credential presence by key name only; never print, persist, or copy secret values. If a required readiness signal is unavailable, record it in data_gaps instead of inventing evidence.

Endor Agent Kit Setup

Use this setup workflow when the user asks to install, check, update, or remove Endor Labs Agent Kit plugin support files, or when an Endor Agent Kit workflow is blocked by missing endorctl, GitHub CLI, authentication, namespace, or local toolchain readiness.

Setup Contract

Be proactive about checking the environment, but do not make persistent changes without explicit user approval. Report evidence for each check. Never print secret values.

Read the full file on GitHub · 204 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago First seen · 204 lines · 0 tokens per session scan A 1988d4fc0195

Subscribe to this mod's changes

endor-agent-kit-setup-agent is an agent published in the GitHub repository endorlabs/ai-plugins (9 stars, last pushed 7d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,980 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Security agentic-appsec agentic-workflows appsec container-scanning endor-labs malware-response

cheatsheet-language-reviewer

Language and editorial reviewer for OWASP cheat sheet changes. Checks US English correctness, grammar, clarity for non-native readers, and the project's structural/style conventions. Invoked by /review-cheatsheet-pr.

OWASP/CheatSheetSeries · 48 tokens

query_optimizer_agent_plan

Query Optimizer Agent 是一个专门用于在 RAG (Retrieval-Augmented Generation) 流程中优化用户查询的智能体。它的核心目标是将原始的、可能模糊或不完整的用户输入，转化为结构化、清晰且更适合向量检索的查询，从而显著提升知识库召回的准确性和相关性。.

DemonDamon/AgenticX · 0 tokens

evaluator-spawn

Generic TaskGraph evaluator shell — executes Transition and Hypothesis nodes the orchestrator dispatched via bobpreparenode. Carries the union of evaluator-family tools; the dispatched brief's allowedtoolsfornode[] is the per-spawn constraint enforced by the X.6 mechanical verifier on bobfinalizenode.

vmihalis/hacker-bob · 63 tokens

endor-agent-kit-setup-agent