claude

fuse-security

Security vulnerability detection and remediation: OWASP Top 10 2025, SAST scanning, CVE research (NVD, OSV.dev), dependency audit, secrets detection, security headers, auth patterns audit

36 on GitHubby Fusenginev1.0.23MITupdated todaysecurity
/

Plugin fuse-security from marketplace fusengine-plugins in Fusengine/claude-plugins. Commands read from the repo's manifest — today.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (6)

  • agentic-security

    Use when auditing the security of an AI-coding-agent setup in a repository: Claude Code project settings and hooks, plugin manifests and hooks.json, .mcp.json and MCP servers, skills, agents and rule files, permission rules, secrets in agent configuration, and CI workflows that run an AI agent on pu

  • auth-audit

    Use when auditing authentication (JWT, sessions, cookies, OAuth2/OIDC/PKCE, password storage, MFA, account recovery) or authorization (BOLA/IDOR, mass assignment, function-level checks, tenant isolation) in web, API or iOS code.

  • cve-research

    Use when checking a specific dependency or package version for known CVEs and security advisories (OSV, GitHub Advisory, NVD), with CVSS, CWE and reachability verification before anything is reported as a finding.

  • dependency-audit

    Use when auditing a project's dependency tree for known vulnerabilities and supply-chain risks (bun/npm/pnpm/yarn, Composer, Cargo, Go modules, SwiftPM, pip, Bundler) and its GitHub Actions workflows. Read-only: reports findings, lists fix commands as options, never applies them.

  • security-headers

    Use when auditing HTTP security headers (CSP with nonce/hash and strict-dynamic, HSTS, frame-ancestors, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP), cookie attributes or CORS — in code (Next.js, Laravel, Astro, TanStack Start, Express, Django) or live on a URL the owner names.

  • security-scan

    Use when scanning a codebase or a change for XSS, injection, command execution, SSRF, path traversal, weak crypto, hardcoded secrets, insecure deserialization or any OWASP Top 10:2025 vulnerability, and reporting verified findings.

Slash commands (1)

  • /fuse-security:scan

    Launch a security audit on the current project (whole repository or a change vs its merge base). Detects vulnerabilities, scans dependencies, checks OWASP Top 10:2025, verifies each finding, and writes a structured report under docs/security/.

Subagents (1)

  • security-expert

    Use when: security audit requested (whole repository or a change vs its merge base), scanning for OWASP Top 10, CVE research, dependency audit, secrets detection, auth hardening, agent-configuration review (.claude/, .mcp.json, hooks, plugins, skills). Do NOT use for: fixing the audited code (the ca

Hooks (2)

  • PreToolUse

    bun $HOME/.claude/plugins/marketplaces/fusengine-plugins/plugins/node_modules/@fusengine/harness/dist/cli/bin.mjs hook claude-code security

  • PostToolUse

    bun $HOME/.claude/plugins/marketplaces/fusengine-plugins/plugins/node_modules/@fusengine/harness/dist/cli/bin.mjs hook claude-code security

View source on GitHub

More from Fusengine/claude-plugins

All 28 plugins →

fuse-ai-pilot

claude

AI Pilot workflow: APEX methodology (auto-detects Laravel/Next.js/React/Swift), sniper (7-phase code quality + DRY detection), research-expert, explore-codebase

19 skills · 12 commands · 9 agents · hooks

36

fuse-seo

claude

SEO/GEO 2026 plugin: technical SEO, schema markup, E-E-A-T, AI Overviews/ChatGPT/Perplexity optimization, local SEO, sitemaps, hreflang, internal linking, semantic clustering, search experience. Local-first, zero third-party APIs.

21 skills · 9 agents · hooks

36

fuse-laravel

claude

Expert Laravel 13 + PHP 8.3+ with SOLID principles, first-class PHP Attributes, Laravel AI SDK, JSON:API Resources, native vector search (pgvector), Eloquent, Livewire, queues with routing, and comprehensive documentation

23 skills · 1 agent · hooks

36

fuse-devops

claude

Expert self-hosted IT/DevOps — Docker, Kubernetes, Linux, Proxmox VE, OpenStack, Terraform/OpenTofu, Ansible, CI/CD, observability, storage and backup, secrets, databases — with a discovery, dry-run, one-go, verify, rollback safety model

18 skills · 1 agent

36

fuse-tailwindcss

claude

Expert Tailwind CSS v4.3 with CSS-first config, @theme, @utility, @variant, Oxide engine, OKLCH colors, container queries

16 skills · 1 agent · hooks

36

fuse-design

claude

UI Designer. Generates HTML/CSS via Gemini Design MCP. 7-phase pipeline with state tracking. Identity System, UX copy, page layouts, motion system, design audit. Anti-AI-Slop, WCAG 2.2.

9 skills · 5 commands · 1 agent · hooks

36

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

AAS Security Engineer

codex

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain fuse-security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins28 plugins