VibeRPGSimulator

Subagents that read Endor Labs findings to triage AI SAST results, plan dependency fixes and explain vulnerabilities.

How it works

Foe: Breach Spider, a security hole an attacker could use.

Foes

  • Breach Spider

Party · Context

  • RogueYour agent100/100

  1. Breach Spider

    The Breach Spider blocks the way.

    What really happensIt stands for a security hole an attacker could use.

    Rogue: Context 100/100.

  2. Exploit

    The spider strikes through a gap nobody guarded. Its bite lingers.

    What really happensAn attacker gets in through a hole nobody checked, and the harm spreads until it is patched.

    Rogue takes 11. Rogue: Context 89/100. Rogue: Poison.

  3. Endor Labs Agent Kit

    The Endor banner is raised, and readiness is checked.

    What really happensInstall the kit, then ask the endor-agent-kit-setup skill to check endorctl, auth and namespace. Setup runs no scans.

    Breach Spider takes 20.

  4. Endor Labs Agent Kit

    Scouts fan out, each with one task.

    What really happensAgents include Findings Browser, Dependency Reviewer, Vulnerability Explainer, Remediation Planning and Malware Responder.

    Findings browser: Context 40/40. Dependency reviewer: Context 40/40. Vulnerability explainer: Context 40/40.

  5. Exploit

    The Breach Spider lashes at Findings browser.

    What really happensThe subagent takes the hit in its own context. The main context stays clean.

    Findings browser takes 11. Findings browser: Context 29/40. Findings browser: Poison.

  6. Endor Labs Agent Kit

    The summons work the problem, each in its own context.

    What really happensEach subagent does its own model and tool work, apart from the main conversation.

    Breach Spider takes 8. Breach Spider takes 8. Breach Spider takes 9.

  7. Endor Labs Agent Kit

    The summons return with short reports.

    What really happensOnly the subagent's final summary comes back to the main agent.

    Rogue takes 2. Rogue takes 2. Rogue takes 2. Rogue: Context 83/100. Rogue: Insight. Findings browser returns. Dependency reviewer returns. Vulnerability explainer returns.

  8. Endor Labs Agent Kit

    The scouts read the reports already on file.

    What really happensThey work from existing Endor findings, such as critical and high reachable issues, and stay read-only unless you approve more.

    Breach Spider takes 16.

  9. Endor Labs Agent Kit

    No blade is drawn without your word.

    What really happensSCA Remediation and AI SAST Remediation ask before each file edit, branch push, PR, ticket or policy write.

    Breach Spider takes 39. Breach Spider falls.

  10. Victory

    The Breach Spider falls.

Learn this spell

Claude Code

/plugin marketplace add endorlabs/ai-plugins
/plugin install endor-labs-agent-kit@endorlabs
/reload-plugins

Codex

codex plugin marketplace add endorlabs/ai-plugins --sparse .agents/plugins --sparse plugins/codex/endor-labs-agent-kit

Notes

Package version 2.2.2. Works from your Endor Labs namespace through endorctl; the setup skill checks readiness and runs no scans. Twelve agents: most are read-only, while SCA Remediation and AI SAST Remediation ask before each edit, push, PR or ticket. In Codex, add the marketplace with the --sparse paths, restart, then install Endor Labs Agent Kit from the plugin directory. Do not enable endor-labs-agent-kit and the older ai-plugins id together.

This spell has no recorded sessions in the curator's logs. Tried it? Send a spell report.