endor-chart-new-vs-resolved-findings

Generate cumulative weekly new versus resolved reachable vulnerability trend charts from FindingLog events.

4|Updated Oct 18, 2025
One-click install
npx skills add https://github.com/endorlabs/endorlabs-sdk --skill endor-chart-new-vs-resolved-findings
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endor-chart-new-vs-resolved-findings
Source: https://github.com/endorlabs/endorlabs-sdk/tree/main/agent-knowledge/skills/endor-chart-new-vs-resolved-findings
Command: npx skills add https://github.com/endorlabs/endorlabs-sdk --skill endor-chart-new-vs-resolved-findings

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires endorlabs, and includes scripts (resource) components.

What problem does it solve?

This Skill turns raw FindingLog events into a clear weekly view of how many critical and high reachable vulnerabilities were newly created versus resolved, so teams can track whether remediation is keeping up with discovery.

Core Features & Use Cases

  • Weekly trend analysis: Aggregates FindingLog CREATE and DELETE events into complete weekly buckets for cumulative new vs resolved charts.
  • Namespace-aware reporting: Produces one chart per namespace root and can include child namespaces when traversal is enabled.
  • Executive burndown reporting: Supports recurring security reporting, tenant health reviews, and vulnerability remediation progress tracking.
  • Operational safeguards: Includes timeout fallback behavior, severity splitting, and validation of chart analysis output for reliable automation.

Quick Start

Ask the assistant to generate a cumulative weekly new-vs-resolved reachable vulnerability chart for a namespace using the FindingLog analysis workflow.

Frequently Asked Questions about endor-chart-new-vs-resolved-findings

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I chart weekly vulnerability trends for new versus resolved findings?▼

You can generate cumulative weekly new versus resolved reachable vulnerability trend charts by aggregating FindingLog CREATE and DELETE events into complete weekly buckets for a specified namespace.

What is a burndown chart for reachable vulnerabilities?▼

A reachable vulnerability burndown chart visualizes cumulative weekly new versus resolved critical and high severity findings to track whether remediation efforts are keeping pace with discovery.

Can I include child namespaces when generating namespace-level security reports?▼

Yes, enabling child namespace traversal allows you to generate namespace-level security reports that include descendant finding data, producing one cumulative weekly trend chart per namespace root.

Does this FindingLog analysis workflow filter by vulnerability severity?▼

Yes, the FindingLog analysis workflow applies critical and high severity filtering to ensure the weekly new versus resolved vulnerability trend charts focus on the most impactful reachable security findings.

What happens if the vulnerability trend chart generation times out?▼

The Skill includes operational safeguards with timeout fallback behavior and validates chart analysis output to ensure reliable automation during executive burndown reporting even if generation times out.

Do I need the endorlabs dependency to generate vulnerability burndown charts?▼

Yes, the endorlabs dependency is required to power the FindingLog analysis workflow that aggregates weekly CREATE and DELETE events and supports canvas generation for vulnerability trend visualization.