Vulnetix AI Coding Agent Plugin

Documentation

Complete reference for the Vulnetix AI Coding Agent Plugin — hooks, skills, commands, agents, and data structures.

The Vulnetix AI Coding Agent Plugin connects your coding agent to Vulnetix VDB, the most comprehensive open-access vulnerability database available. 160 upstream sources — CVE, GHSA, OSV, vendor advisories, and many more — aggregated, normalised, and enriched with exploit intelligence, malware associations, and safe upgrade paths.

The plugin scans your dependencies as you code, flags vulnerabilities and malicious packages in real time, and gives your agent the context to recommend fixes that won’t introduce new problems. No context-switching, no separate tools, no post-facto scanning.

Free to start with a Community API key. Pro ($25/mo) unlocks the full enrichment layer — malware intelligence, safe harbour versioning, AI-generated advisories, and more.

Install
Install for Claude Code, Augment, Windsurf, Roo Code, and 28 more agents.
Getting Started
Prerequisites, authentication, and verification.
Hooks
Six event-driven hooks that scan automatically during your workflow.
Skills
Six interactive skills for deep vulnerability analysis and remediation.
Commands
Four deterministic CLI wrappers for raw VDB data access.
Agents
Autonomous multi-vulnerability triage and prioritization.
Data Structures
Memory files, SBOMs, and PoC caching in the .vulnetix/ directory.
Reference
Supported ecosystems, vulnerability identifiers, and integrations.
Troubleshooting
Common issues, diagnostics, and fixes.
Install
Install the Vulnetix security plugin for your AI coding agent.
Getting Started
Install prerequisites, add the plugin, and verify your setup.
Hooks
Event-driven hooks that scan, track, and surface vulnerability intelligence automatically. Includes capability detection, dependency-add gating, container/IaC pre-checks, and prompt routing.
Skills
LLM-guided interactive workflows that analyze vulnerabilities, assess risk, and propose remediation using AI.
Commands
Deterministic CLI wrappers that run vulnetix vdb subcommands directly with no LLM analysis.
Agents
Autonomous multi-step workflows that analyze, prioritize, and report on vulnerabilities with minimal user intervention.
Data Structures
The .vulnetix/ directory and its contents -- memory files, SBOMs, and PoC source caches.
jq filter library
How Pix v1.4.0 routes every Vulnetix VDB call through a verified jq filter to keep LLM context small. Covers the library layout, verification workflow, and CLI quirks.
Reference
Supported ecosystems, vulnerability identifier formats, and third-party integrations.
Troubleshooting
Common issues, diagnostics, and fixes for the Vulnetix AI Coding Agent Plugin.