Explains a CVE, GHSA, or Endor vulnerability, optionally in the context of a supplied package and version. It summarizes severity, exploitability signals, affected and fixed versions, recommended remediation, and relevant reachability or repository context when supported by exact Endor evidence. It clearly identifies missing information rather than inferring package or project applicability.
Install
npx skills add endorlabs/ai-plugins --skill vulnerability-explainernpx skills add endorlabs/ai-plugins --skill vulnerability-explainer -a claude-code -gnpx skills add endorlabs/ai-plugins --skill vulnerability-explainer -a codex -ggemini skills install https://github.com/endorlabs/ai-plugins.git --path plugins/cursor/endor-labs-agent-kit/skills/vulnerability-explainergh skill install endorlabs/ai-plugins vulnerability-explainergit clone --depth 1 https://github.com/endorlabs/ai-plugins /tmp/endorlabs__ai-plugins
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/endorlabs__ai-plugins/plugins/cursor/endor-labs-agent-kit/skills/vulnerability-explainer ~/.claude/skills/vulnerability-explainer # Claude Code
cp -R /tmp/endorlabs__ai-plugins/plugins/cursor/endor-labs-agent-kit/skills/vulnerability-explainer ~/.agents/skills/vulnerability-explainer # Codex, Cursor, Gemini CLI, Copilot, OpenCode