> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer/agentix-package-recommendations.md).

# Agentix package recommendations

When a package has high operational risk or multiple CVEs, you can use Cortex Agentix to generate data-driven recommendations for safer alternative packages directly from the side card.

## **Prerequisites**

* Cortex Agentix with the AppSec Agent available and enabled in the tenant
* Agentix content enabled for the tenant's region. If Agentix is not available in the region or the AppSec Agent content is not enabled, the **Show alternatives** action does not open the Agentix sidecar
* An identity with permission to run the Cortex Agentix AppSec Agent

1. Open the package side card for the package you want to replace: Navigate to Modules > Supply Chain Security > Package Explorer > select the package from the table.
2. In the **Overview** tab, locate the **Highlights** section and select **Show alternatives**. Expected outcome: The Cortex Agentix sidecar opens and the AppSec Agent runs a prompt scoped to the selected package and version.

**What happens next:** The AppSec Agent returns alternative-package recommendations in the Agentix sidecar. Use the recommendations to choose a safer default during design and development.

## **Agentix prompt types for Package Explorer**

The **Show alternatives** action seeds the Agentix sidecar with a prompt scoped to the selected `package@version`. The AppSec Agent supports the following prompt types for Package Explorer packages.

| Prompt type            | Use when                                                                                        | What the agent returns                                                                                                                                                          |
| ---------------------- | ----------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Safer alternative**  | The package has multiple CVEs and elevated operational risk, and you want a drop-in replacement | An alternative OSS package that provides similar functionality and capability to the selected `package@version`, prioritizing lower vulnerability exposure and operational risk |
| **Risk explanation**   | You need to justify a remediation decision or understand why the package is flagged             | A plain-language explanation of the package operational risk and vulnerability exposure, grounded in the package popularity, maintenance, and CVE signals                       |
| **Migration guidance** | You have selected a replacement and need to plan the upgrade                                    | Step-by-step guidance for migrating from the selected `package@version` to a recommended alternative, including breaking-change considerations                                  |

NOTE: The available prompt types depend on the AppSec Agent content enabled for the tenant. If a prompt type is not enabled, the Agentix sidecar does not offer that prompt.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/application-security/software-supply-chain-security/visibililty-and-inventory/package-explorer/agentix-package-recommendations.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.