Correlates current software supply-chain malware intelligence for affected packages and versions with Endor inventory across a namespace and its child namespaces. It distinguishes confirmed exposure, possible exposure, not-observed exposure, and insufficient data using exact package, version, and inventory evidence.
Install
npx skills add endorlabs/ai-plugins --skill malware-respondernpx skills add endorlabs/ai-plugins --skill malware-responder -a claude-code -gnpx skills add endorlabs/ai-plugins --skill malware-responder -a codex -ggemini skills install https://github.com/endorlabs/ai-plugins.git --path plugins/cursor/endor-labs-agent-kit/skills/malware-respondergh skill install endorlabs/ai-plugins malware-respondergit clone --depth 1 https://github.com/endorlabs/ai-plugins /tmp/endorlabs__ai-plugins
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/endorlabs__ai-plugins/plugins/cursor/endor-labs-agent-kit/skills/malware-responder ~/.claude/skills/malware-responder # Claude Code
cp -R /tmp/endorlabs__ai-plugins/plugins/cursor/endor-labs-agent-kit/skills/malware-responder ~/.agents/skills/malware-responder # Codex, Cursor, Gemini CLI, Copilot, OpenCode