Vulnetix contributor

Vulnetix Plugins

Pull Vulnetix vulnerability intelligence into Claude Code to scan dependencies on commit and propose fixes from the VDB API.

Overview

vulnetix-plugins is a plugin marketplace for the Ship phase that wires Claude Code to Vulnetix for commit-time dependency scans, exploit-aware lookups, and fix proposals.

What is this marketplace?

  • vulnetix plugin scans project dependencies on commit via Vulnetix VDB API
  • Searches packages for risk data and analyzes exploits in-agent
  • Proposes fixes grounded in vulnerability intelligence, not generic bumps alone
  • Vulnetix-authored marketplace bundle at plugin version 1.3.0
  • Positioned as vulnerability intelligence for Claude Code workflows

Compatible agents: Claude Code, any compatible agent

Community signal: 7 GitHub stars.

What problem does it solve?

Dependency vulnerabilities slip through because agent-assisted coding does not automatically consult exploit intelligence when lockfiles change.

Who is it for?

Solo builders shipping npm-style stacks in Claude Code who want continuous dependency intelligence tied to the Vulnetix VDB.

Skip if: Air-gapped repos without API access, teams standardizing on a different-only SAST suite with no agent workflow, or non-Claude-only pipelines.

What do I get? / Deliverables

After install, commits can trigger VDB-backed scans and your agent can search packages, interpret exploits, and suggest remediations in context.

  • Installed vulnetix plugin (version 1.3.0) from the marketplace
  • Commit-triggered dependency risk reports via Vulnetix
  • Agent-proposed remediations informed by package and exploit data

Plugins in this marketplace

1 plugin — install individually after you add the marketplace.

Recommended Marketplaces

Journey fit

Primary fit

Supply-chain and exploit-aware checks belong on the Ship security shelf before you promote builds, with hooks that also fire during active Build. Security subphase captures dependency risk, exploit context, and remediation proposals rather than generic coding assistance.

How it compares

VDB-backed vulnerability intelligence plugin, not a general tech-debt MCP marketplace or infra operator skill.

Common Questions / FAQ

Who is Vulnetix Plugins for?

Vulnetix Plugins is for Claude Code users who want Vulnetix-driven vulnerability intelligence on dependencies during everyday coding and commits.

When should I use Vulnetix Plugins?

Use it when you are hardening Ship/security workflows or integrating Build-time dependency checks with exploit analysis and fix suggestions.

How do I add Vulnetix Plugins to my agent?

Register the Vulnetix/pix-ai-coding-assistant marketplace, install the vulnetix plugin, configure Vulnetix VDB API credentials per Vulnetix docs, and enable commit-time scanning in your Claude Code project.

This week for builders

Five minutes, every Monday — the tools, releases and tactics for shipping solo.

unsubscribe anytime.