claude

osv-scanner

Scans project dependencies for known vulnerabilities using OSV Scanner and the OSV database.

4 on GitHubby Alejandro Saenzv0.1.1MITupdated 1 month agosecurity
/

Plugin osv-scanner from marketplace bonfires-marketplace in alejandrosaenz117/bonfires-marketplace. Commands read from the repo's manifest — 1 month ago.

This plugin runs code on your machine — it starts local MCP servers. The exact commands are listed below; read them before installing.

What it installs

Skills (1)

  • osv-scanner

    This skill should be triggered when the user asks about dependency security, vulnerability scanning, or package safety. Examples: \"check my dependencies for vulnerabilities\", \"scan my packages\", \"are my dependencies safe\", \"dependency audit\", \"check for CVEs\", \"security audit\", \"vulnera

Slash commands (2)

  • /osv-scanner:scan

    Scan a directory or lockfile for vulnerable dependencies using OSV Scanner. Reports known vulnerabilities in packages and lockfiles.

  • /osv-scanner:triage

    AI-powered reachability triage for dependency vulnerabilities. Scans for CVEs then searches your source code to estimate whether each vulnerable API is actually called. Outputs a prioritized FOUND_IN_SOURCE / UNCERTAIN / NOT_FOUND_IN_GREP report.

MCP servers (1)

  • osv-scanner

    runs: osv-scanner experimental-mcp

View source on GitHub

More from alejandrosaenz117/bonfires-marketplace

All 3 plugins →

devils-advocate

claude

Adversarial security and architectural code review. Finds the most plausible security failure in your code.

1 skill · 1 command · 1 agent

4

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain osv-scanner?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins3 plugins