Evaluates an exact package version, summarizes package risk, or reviews dependencies declared by a repository through one focused workflow. It uses available vulnerability, malware, package-health, license, policy, and Endor evidence to provide a read-only recommendation and clearly identify missing information.
Install
npx skills add endorlabs/ai-plugins --skill dependency-reviewernpx skills add endorlabs/ai-plugins --skill dependency-reviewer -a claude-code -gnpx skills add endorlabs/ai-plugins --skill dependency-reviewer -a codex -ggemini skills install https://github.com/endorlabs/ai-plugins.git --path plugins/cursor/endor-labs-agent-kit/skills/dependency-reviewergh skill install endorlabs/ai-plugins dependency-reviewergit clone --depth 1 https://github.com/endorlabs/ai-plugins /tmp/endorlabs__ai-plugins
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/endorlabs__ai-plugins/plugins/cursor/endor-labs-agent-kit/skills/dependency-reviewer ~/.claude/skills/dependency-reviewer # Claude Code
cp -R /tmp/endorlabs__ai-plugins/plugins/cursor/endor-labs-agent-kit/skills/dependency-reviewer ~/.agents/skills/dependency-reviewer # Codex, Cursor, Gemini CLI, Copilot, OpenCode