Summary

Adds a new dep-vulnerability-scanner plugin that provides comprehensive dependency vulnerability scanning capabilities using industry-standard tools.

Changes

• Plugin registration: Added plugin entry to .claude-plugin/marketplace.json
• Plugin metadata: Created plugin.json with plugin information
• Documentation: Added comprehensive README covering all supported tools and usage patterns
• Commands: Implemented four main commands:
  • /vuln-scan - Auto-detect project type and run appropriate vulnerability scanner
  • /vuln-setup - Install and configure scanning tools on the system
  • /vuln-compare - Compare different scanning tools to help users choose the right one
  • /vuln-ci-workflow - Generate GitHub Actions workflows for automated scanning

Key Features

• Multi-tool support: Integrates with Trivy, Grype, npm audit, bun audit, and pip-audit
• Auto-detection: Automatically detects project type (Node.js, Bun, Python, etc.) and suggests appropriate scanner
• Universal scanning: Supports both language-specific and universal vulnerability scanners
• CI/CD integration: Provides GitHub Actions workflow templates for automated scanning
• Installation guidance: Includes setup instructions for multiple platforms (macOS, Linux, Docker, etc.)
• Tool comparison: Helps users understand trade-offs between different scanning approaches

Implementation Details

• Commands are documented in separate markdown files for maintainability
• Comprehensive README includes quick reference guides for each tool
• Workflow templates cover single-tool and multi-scanner approaches
• Tool selection guide helps users pick the right scanner for their use case

https://claude.ai/code/session_01YTRyLsj2WE2CvqV3pDJQN9