Bonfires Marketplace FAQs

Name: Bonfires Marketplace
Author: alejandrosaenz117

Question 1

What are the capabilities of the OSV Scanner plugin?

Accepted Answer

The OSV Scanner integrates the OSV vulnerability database into Claude Code, enabling scans of dependencies for known CVEs, fetching detailed advisories, and performing grep-based reachability triage to identify actual vulnerabilities in your code paths.

Question 2

What is Bonfires Marketplace?

Accepted Answer

Bonfires Marketplace is a directory of Claude Code plugins specifically designed for security-focused development, including tools for adversarial code review, dependency vulnerability scanning, and vulnerability reachability triage.

Question 3

What key security plugins are available in Bonfires Marketplace?

Accepted Answer

Currently, the marketplace features 'The Devil's Advocate' for adversarial code review and 'OSV Scanner' for dependency vulnerability scanning, CVE advisory access, and grep-based reachability triage.

Question 4

How do I install plugins from Bonfires Marketplace into Claude Code?

Accepted Answer

First, register the marketplace using `/plugin marketplace add alejandrosaenz117/bonfires-marketplace`, then install individual plugins such as `/plugin install devils-advocate@bonfires-marketplace` or `/plugin install osv-scanner@bonfires-marketplace`.

Question 5

How does 'The Devil's Advocate' plugin enhance security reviews?

Accepted Answer

'The Devil's Advocate' provides adversarial insights, challenging assumptions and consensus to reveal potential failures, breaches, and architectural weaknesses before they manifest, acting as a 'tenth man' for security.

Bonfires Marketplace

Bonfires Marketplace

主な機能

ユースケース

主な機能

ユースケース