What is endor-agent-kit-setup?

Setup and troubleshooting instructions for Endor Labs Agent Kit in Antigravity CLI. Endor Labs is a software-security platform, and Antigravity CLI is the command-line environment used to run its agent workflows.

Use them to install or verify the kit, check Endor authentication, and diagnose missing command-line or MCP dependencies.

They help check whether the required tools, authentication, namespaces, and connections are ready before security workflows are run.

endor-agent-kit-setup — Skill for Claude Code by endorlabs/ai-plugins

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add endorlabs/ai-plugins --skill endor-agent-kit-setup

Clone the repo

git clone --depth 1 https://github.com/endorlabs/ai-plugins

Made for: Claude Code.

Or install ai-plugins, the plugin that ships this one along with the rest of its 12 skills, 11 agents, 3 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/endorlabs/ai-plugins/endor-agent-kit-setup/github.svg)](https://agentmods.dev/skills/endorlabs/ai-plugins/endor-agent-kit-setup)

Your own site

<a href="https://agentmods.dev/skills/endorlabs/ai-plugins/endor-agent-kit-setup"><img src="https://agentmods.dev/badge/skills/endorlabs/ai-plugins/endor-agent-kit-setup/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/endorlabs/ai-plugins/endor-agent-kit-setup"><img src="https://agentmods.dev/badge/skills/endorlabs/ai-plugins/endor-agent-kit-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 54 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,215 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 4 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

high Privilege Escalation · line 194
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
medium Rogue Agent · line 88
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
medium Excessive Agency · line 166
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
medium MCP Rug Pull · line 173
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.

Fix: Pin the version: npx @scope/[email protected]

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00054	$0.02215
Opus 5.5	$0.00022	$0.00886
Sonnet 5.5	$0.00011	$0.00443
Haiku 4.5	$0.00005	$0.00221

Measured 1mo ago against content hash f2e6c27aac42, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

endor-agent-kit-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/antigravity/endor-labs-agent-kit/skills/endor-agent-kit-setup/SKILL.md · 222 lines

How it starts

The opening of the file, as written. The whole thing — 222 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Endor Agent Kit Setup For Antigravity CLI

Generated for the Endor Labs Agent Kit Antigravity CLI plugin.

Bundled Antigravity CLI Workflows

AI SAST Remediation -> skill ai-sast-remediation, subagent @ai-sast-remediation
CI/CD And Supply Chain Posture -> skill cicd-posture, subagent @cicd-posture
Configuration Automation -> skill configuration-automation, subagent @configuration-automation
Dependency Reviewer -> skill dependency-reviewer, subagent @dependency-reviewer
Findings Browser -> skill findings-browser, subagent @findings-browser
Malware Responder -> skill malware-responder, subagent @malware-responder
OSS Upgrade Investigator -> skill oss-upgrade-investigator, subagent @oss-upgrade-investigator
Remediation Planning -> skill remediation-planning, subagent @remediation-planning
SCA Remediation -> skill sca-remediation, subagent @sca-remediation
Troubleshooting -> skill troubleshooting, subagent @troubleshooting
Vulnerability Explainer -> skill vulnerability-explainer, subagent @vulnerability-explainer

Antigravity CLI Plugin Commands

Validate and install from the generated local plugin package:

agy plugin validate /path/to/endor-labs-agent-kit/plugins/antigravity/endor-labs-agent-kit
agy plugin install /path/to/endor-labs-agent-kit/plugins/antigravity/endor-labs-agent-kit
agy plugin list

Remove the plugin only after explicit user approval:

agy plugin uninstall endor-labs-agent-kit

Antigravity CLI is the consumer migration path for Gemini CLI. Keep Gemini extension installation and Antigravity plugin installation as separate host-specific choices, and validate the selected package before installing.

Endor Agent Kit Setup

Use this setup workflow when the user asks to install, check, update, or remove Endor Labs Agent Kit plugin support files, or when an Endor Agent Kit workflow is blocked by missing endorctl, GitHub CLI, authentication, namespace, or local toolchain readiness.

Read the full file on GitHub · 222 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 222 lines · 54 tokens per session scan A f2e6c27aac42

Subscribe to this mod's changes

endor-agent-kit-setup is a skill published in the GitHub repository endorlabs/ai-plugins (10 stars, last pushed 3d ago), licensed MIT. It adds 54 tokens to every session and 2,215 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Security agentic-appsec agentic-workflows appsec container-scanning endor-labs malware-response

audit-skills

Detects and closes drift between the latest released Pixee CLI surface and the published skills/pixee- skills on origin/main. Trigger after a new pixee release, on a /audit-skills request, or when the contributor asks 'are the skills up to date?', 'is there a missing pixee skill?', 'does the CLI match the skills?'…

pixee/pixee-cli · 157 tokens

add-resource-skill

Authors a new skills.sh-formatted skill for the pixee CLI under skills/pixee- /SKILL.md. Trigger on requests like "add a resource skill", "write a skill for pixee X", "author a pixee skill", or "publish a skill for the new Y subcommand". Captures pixee-specific conventions (one skill per sub-command with a shared…

pixee/pixee-cli · 132 tokens

endor-agent-kit-setup