{
  "markdown": "# 🧩 Endor Labs AI Plugins\n\nPublic distribution repository for Endor Labs Agent Kit packages across Claude\nCode, Codex, Gemini CLI, Antigravity CLI, Cursor IDE, Cursor SDK, and root MCP\nsupport context.\n\n> [!IMPORTANT]\n> This repo is the distribution mirror. Agent behavior, generated package\n> shape, guardrails, tests, and source documentation are owned by\n> [🐙 The Endor Labs Agent Kit](https://github.com/endorlabs/endor-labs-agent-kit/tree/main).\n\nCurrent generated Agent Kit package version: `2.2.2`. Agent Kit maintainer\nmerges open or update generated distribution PRs in this repo, but they do not\nautomatically bump package versions. Version bumps are intentional release\nactions from the source repo.\n\n## 🚦 Start Here\n\n| I want to... | Go here |\n| --- | --- |\n| 🚀 Install a host package | [Quick Start](#-quick-start) |\n| 🧾 See what changed | [`CHANGELOG.md`](CHANGELOG.md) |\n| 🖱️ Use Cursor IDE agents | [Cursor IDE](#cursor-ide) |\n| 🐍 Run Cursor SDK automation | [`cursor-sdk/README.md`](cursor-sdk/README.md) |\n| 🤖 Ask an agent to review this mirror | [`docs/for-agents.md`](docs/for-agents.md) |\n| 📦 Sync from Agent Kit source | [`docs/distribution-sync.md`](docs/distribution-sync.md) |\n| ✅ Prepare a release | [`docs/plugin-release-checklist.md`](docs/plugin-release-checklist.md) |\n\nA machine-readable index is available in [`llms.txt`](llms.txt).\n\n## 🧭 Browse The Distribution\n\n| Area | What is inside |\n| --- | --- |\n| 🧑‍💻 Claude Code | `.claude-plugin/marketplace.json`, `plugins/claude/endor-labs-agent-kit/`, legacy `plugins/claude/ai-plugins/` |\n| 🧠 Codex | `.agents/plugins/marketplace.json`, `plugins/codex/endor-labs-agent-kit/` |\n| 💎 Gemini CLI | `plugins/gemini/endor-labs-agent-kit/` |\n| 🛫 Antigravity CLI | `plugins/antigravity/endor-labs-agent-kit/` |\n| 🖱️ Cursor IDE | `.cursor-plugin/marketplace.json`, `plugins/cursor/endor-labs-agent-kit/` |\n| 🐍 Cursor SDK | `cursor-sdk/` Python launcher, generated prompts, and agent definitions |\n| 🔁 Root support | Claude compatibility surfaces and non-installable `GEMINI.md` context |\n| 🧾 Release docs | `docs/`, `llms.txt`, `plugins/README.md` |\n\n## 🚀 Quick Start\n\nPick your host, install the package, then run setup. Setup checks local\nreadiness and does not run scans.\n\n```text\nUse the endor-agent-kit-setup skill to check Endor Agent Kit readiness. Do not run scans.\n```\n\n### Claude Code\n\nInstall the preferred package id:\n\n```text\n/plugin marketplace add endorlabs/ai-plugins\n/plugin install endor-labs-agent-kit@endorlabs\n/reload-plugins\n/agents\n```\n\nExisting Claude Code users pinned to the historical id can keep using:\n\n```text\n/plugin marketplace add endorlabs/ai-plugins\n/plugin install ai-plugins@endorlabs\n/reload-plugins\n/agents\n```\n\nDo not enable `endor-labs-agent-kit@endorlabs` and `ai-plugins@endorlabs` in\nthe same Claude profile for normal use. They expose the same setup skill and\nagents.\n\nDetails: [`plugins/claude/endor-labs-agent-kit/README.md`](plugins/claude/endor-labs-agent-kit/README.md).\n\n### Codex\n\nAdd the Endor Labs marketplace, restart Codex, then install **Endor Labs Agent\nKit** from the Codex plugin directory:\n\n```bash\ncodex plugin marketplace add endorlabs/ai-plugins \\\n  --sparse .agents/plugins \\\n  --sparse plugins/codex/endor-labs-agent-kit\n```\n\nAfter installation, start a new Codex thread and ask setup to install or update\nthe bundled Endor custom agents:\n\n```text\nUse the endor-agent-kit-setup skill to check readiness and install the bundled Codex custom agents.\n```\n\nDetails: [`plugins/codex/endor-labs-agent-kit/README.md`](plugins/codex/endor-labs-agent-kit/README.md).\n\n### Cursor IDE\n\nInstall the current public Cursor Marketplace package from Cursor Agent chat:\n\n```text\n/add-plugin endorlabs\n```\n\nMarketplace page: [`cursor.com/marketplace/endorlabs`](https://cursor.com/marketplace/endorlabs).\n\nOpen the target project folder, reload Cursor if prompted, then run setup:\n\n```text\nUse the endor-agent-kit-setup skill to set up endorctl.\n```\n\n### Cursor SDK\n\nUse the SDK lane for Python automation, CI, orchestration, backend services, or\nCursor cloud agents:\n\n```bash\npython3 -m pip install -r cursor-sdk/requirements.txt\nexport CURSOR_API_KEY=\"crsr_...\"\npython cursor-sdk/run_cursor_agent.py endor-configuration-automation-agent \\\n  --workspace /path/to/repo \\\n  \"Explain what evidence you need to assess GitHub onboarding gaps. Keep it read-only.\"\n```\n\nCloud run shape:\n\n```bash\npython cursor-sdk/run_cursor_agent.py endor-sca-remediation-agent \\\n  --mode cloud \\\n  --repo-url https://github.com/your-org/your-repo \\\n  --ref main \\\n  \"Prepare a remediation plan only. Do not edit files or open a PR.\"\n```\n\n### Gemini CLI\n\nInstall the generated Gemini extension package from the public repository:\n\n```bash\ngit clone https://github.com/endorlabs/ai-plugins\ngemini extensions install ./ai-plugins/plugins/gemini/endor-labs-agent-kit\ngemini extensions list\n```\n\nFor local validation from a checkout, install the generated extension directory:\n\n```bash\ngemini extensions install ./plugins/gemini/endor-labs-agent-kit\n```\n\nRestart Gemini CLI after installing or reinstalling the extension.\n\nGoogle documents Antigravity CLI as the consumer transition path for Gemini\nCLI. Use the Gemini package for supported Gemini CLI environments and\ncompatibility checks; use the Antigravity package below for affected Gemini CLI\nconsumer accounts.\n\nDetails: [`plugins/gemini/endor-labs-agent-kit/README.md`](plugins/gemini/endor-labs-agent-kit/README.md).\n\n### Antigravity CLI\n\nClone the distribution repo, then install the generated plugin directory:\n\n```bash\ngit clone https://github.com/endorlabs/ai-plugins\ncd ai-plugins\nagy plugin validate ./plugins/antigravity/endor-labs-agent-kit\nagy plugin install ./plugins/antigravity/endor-labs-agent-kit\nagy plugin list\n```\n\nRestart Antigravity CLI if newly installed skills or subagents are not visible.\n\nDetails: [`plugins/antigravity/endor-labs-agent-kit/README.md`](plugins/antigravity/endor-labs-agent-kit/README.md).\n\n## ⚡ Agent Quick Starts\n\n| Agent | Best for | Cursor / SDK name | Safety | First prompt |\n| --- | --- | --- | --- | --- |\n| 🔎 AI SAST Remediation | Triage Endor AI SAST findings, use exploit and remediation context, and open requested change requests | `endor-ai-sast-remediation-agent` | approval-gated mutating | `Triage AI SAST findings for this repository. Do not edit files, open a PR/MR, create a ticket, or write an Endor policy until I approve the specific gate.` |\n| 🧭 CI/CD And Supply Chain Posture | Assess CI/CD and supply chain posture from existing Endor findings and read-only GitHub configuration evidence | `endor-cicd-posture-agent` | read-only | `Assess CI/CD and supply chain posture for namespace <namespace>. Keep it read-only and validate the deterministic score.` |\n| 📡 Configuration Automation | Probe GitHub.com onboarding gaps and prescribe Endor scan profiles, toolchains, package integrations, and reachability setup | `endor-configuration-automation-agent` | read-only | `Explain what evidence you need to assess GitHub onboarding gaps for this repository. Keep it read-only.` |\n| ⚖️ Dependency Reviewer | Review an exact package decision, package risk, or repository dependencies through one bounded profile | `endor-dependency-reviewer-agent` | read-only | `Review this repository's exact direct dependencies with the repository-review profile. Keep it read-only.` |\n| 🔍 Findings Browser | Browse, filter, and summarize existing Endor findings | `endor-findings-browser-agent` | read-only | `Show the critical and high reachable findings for namespace <namespace>. Keep it read-only.` |\n| 🚨 Malware Responder | Correlate current software-supply-chain malware intelligence with tenant package inventory and report containment guidance | `endor-malware-responder-agent` | read-only | `Assess tenant exposure to malware campaign <campaign>. Keep it read-only and report evidence gaps.` |\n| ⬆️ OSS Upgrade Investigator | Analyze Endor platform upgrade impact with VersionUpgrade, CIA, findings, and manifest context | `endor-oss-upgrade-investigator-agent` | read-only | `Show the safest upgrade path for repository <owner>/<repo> package lodash. Keep it read-only.` |\n| 🗺️ Remediation Planning | Preview safe dependency remediation options without opening PRs | `endor-remediation-planning-agent` | read-only | `Preview remediation options for this repository. Do not edit files or open a PR/MR.` |\n| 🛠️ SCA Remediation | Find safe dependency remediation paths with Endor SCA evidence | `endor-sca-remediation-agent` | approval-gated mutating | `Inspect this repository and prepare a remediation plan only. Do not edit files, create branches, push, open a PR/MR, create a ticket, or write Endor policy.` |\n| 🧯 Troubleshooting | Diagnose setup, scan, auth, policy, or integration issues | `endor-troubleshooting-agent` | read-only | `Diagnose this Endor issue from redacted error text and read-only tenant evidence. Keep it read-only.` |\n| 💬 Vulnerability Explainer | Understand a specific CVE, GHSA, or Endor vulnerability and what to do next | `endor-vulnerability-explainer-agent` | read-only | `Explain CVE-2021-44228 using verified Endor evidence. Keep it read-only.` |\n| 🧰 Setup | Check host, auth, namespace, `endorctl`, `gh`, and workflow readiness | `endor-agent-kit-setup-agent` | read-only | `Check Endor Agent Kit readiness for this repository. Do not run scans.` |\n\nThe provider packages expose the same generated workflow set from Agent Kit\nsource recipes. Use the host package README for exact install and invocation\nsyntax.\n\n## 📦 Distribution Paths\n\n| Host | Distribution path | Notes |\n| --- | --- | --- |\n| Claude Code | `.claude-plugin/marketplace.json`, `plugins/claude/endor-labs-agent-kit/`, `plugins/claude/ai-plugins/` | Preferred package plus legacy compatibility. |\n| Codex | `.agents/plugins/marketplace.json`, `plugins/codex/endor-labs-agent-kit/` | Skills, custom-agent TOML files, and installer script. |\n| Gemini CLI | `plugins/gemini/endor-labs-agent-kit/` | Directory install locally; tagged GitHub repo for public installs. |\n| Antigravity CLI | `plugins/antigravity/endor-labs-agent-kit/` | Package directory with root `plugin.json`. |\n| Cursor IDE | `.cursor-plugin/marketplace.json`, `plugins/cursor/endor-labs-agent-kit/` | Marketplace index plus a self-contained Cursor package. |\n| Cursor SDK | `cursor-sdk/` | Python SDK launcher, generated prompts, and local/cloud run instructions. |\n| Root support | `agents/`, `skills/`, `hooks/`, `runtime/`, `GEMINI.md` | Claude compatibility surfaces plus non-installable Gemini support context. |\n\n## 🔒 Safety Rules\n\n- Setup is readiness guidance; it must not run scans or mutate repositories.\n- Setup must not run `endorctl host-check`.\n- Install, update, auth, namespace, and host-specific package steps must be\n  explicit and evidence-backed.\n- Do not print, persist, or copy secret values. Report credential presence only\n  by variable or key name.\n- Live Endor API evidence requires explicit approval and namespace provenance.\n- Mutating workflows split file edits, branch pushes, PR/MR creation, comments,\n  tickets, approval verification, and Endor policy writes into separate gates.\n\n## 🔁 Source Sync\n\nDo not change generated Agent Kit behavior by editing package files in this\nrepo. Make behavior changes in the Agent Kit source repo, regenerate there,\nthen let the Agent Kit publish workflow open a generated PR here.\n\nGenerated sync PRs should include:\n\n- source Agent Kit commit in the PR body\n- `provenance/agent-kit-catalog.intoto.json`\n- `provenance/manifest.sha256`\n- validation evidence for root skills, advisory hooks, JSON metadata, Cursor\n  SDK, Gemini no-zip, byte-for-byte generated-surface diffs, and\n  `git diff --check`\n\nManual fallback uses the Agent Kit sync script:\n\n```bash\nAGENT_KIT_REPO=\"/path/to/endor-labs-agent-kit\"\n\npython3 \"$AGENT_KIT_REPO/scripts/sync_ai_plugins_distribution.py\" \\\n  --source \"$AGENT_KIT_REPO\" \\\n  --target .\n```\n\n## ✅ Validation\n\n```bash\nfor skill in skills/* plugins/cursor/endor-labs-agent-kit/skills/*; do\n  python3 scripts/quick_validate.py \"$skill\"\ndone\npython3 -m json.tool .claude-plugin/marketplace.json >/dev/null\npython3 -m json.tool .agents/plugins/marketplace.json >/dev/null\npython3 -m json.tool .cursor-plugin/marketplace.json >/dev/null\npython3 -m json.tool plugins/cursor/endor-labs-agent-kit/.cursor-plugin/plugin.json >/dev/null\npython3 scripts/validate_marketplace_host_boundaries.py --root .\npython3 -m json.tool cursor-sdk/agent_definitions.json >/dev/null\npython3 -m json.tool hooks/hooks.json >/dev/null\npython3 -m json.tool plugins/claude/endor-labs-agent-kit/hooks/hooks.json >/dev/null\npython3 -m json.tool plugins/codex/endor-labs-agent-kit/hooks/hooks.json >/dev/null\npython3 -m json.tool plugins/gemini/endor-labs-agent-kit/hooks/hooks.json >/dev/null\npython3 -m json.tool plugins/antigravity/endor-labs-agent-kit/hooks.json >/dev/null\ntest ! -e plugins/claude/ai-plugins/hooks\nfor hook_script in hooks/*.sh plugins/*/*/hooks/*.sh; do bash -n \"$hook_script\"; done\npython3 - <<'PY'\nimport py_compile\n\npy_compile.compile(\"cursor-sdk/run_cursor_agent.py\", cfile=\"/tmp/run_cursor_agent.pyc\", doraise=True)\nPY\ntest ! -e gemini-extension.json\ntest -f plugins/gemini/endor-labs-agent-kit/gemini-extension.json\ntest ! -e plugins/gemini/endor-labs-agent-kit.zip\ngit diff --check\n```\n\nThese checks also run automatically on every pull request via\n[`.github/workflows/validate.yml`](.github/workflows/validate.yml).\n\nGenerated drift checks:\n\n```bash\nAGENT_KIT_REPO=\"/path/to/endor-labs-agent-kit\"\n\nfor host in antigravity claude codex codex-directory gemini; do\n  diff -qr \"$AGENT_KIT_REPO/plugins/$host\" \"./plugins/$host\"\ndone\ndiff -qr \"$AGENT_KIT_REPO/cursor-sdk\" ./cursor-sdk\ndiff -q \"$AGENT_KIT_REPO/assets/logo.png\" assets/logo.png\npython3 scripts/validate_marketplace_host_boundaries.py --root .\n```\n\n## 🗂️ Repository Reference\n\n```text\n.agents/plugins/marketplace.json\n.claude-plugin/marketplace.json\n.cursor-plugin/\nagents/\nassets/logo.png\ncursor-sdk/\ndocs/\nhooks/\nGEMINI.md\nllms.txt\nplugins/\nscripts/\nskills/\n```\n\n## License\n\nThis repository includes the existing `LICENSE` file and Endor Labs plugin\nmetadata for the public distribution packages. Confirm final marketplace,\nlicense, and host metadata requirements before public submission.\n",
  "bytes": 14350,
  "sha": "612948a94a49750cd7c8dba4254d3e36d089555161358c70bd721d124182f088",
  "repo_slug": "endorlabs/ai-plugins",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/plg_endorlabs_ai_plugins_ai_plugins_0c3c9758/readme"
}