claude

fuse-security

Security vulnerability detection and remediation: OWASP Top 10 2025, SAST scanning, CVE research (NVD, OSV.dev), dependency audit, secrets detection, security headers, auth patterns audit

34 on GitHubby Fusenginev1.0.20MITupdated 1 month agosecurity
/

Plugin fuse-security from marketplace fusengine-plugins in fusengine/agents. Commands read from the repo's manifest — 1 month ago.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (5)

  • auth-audit

    Use when auditing JWT, session, OAuth2/PKCE, password, or MFA implementations for security vulnerabilities and best-practice deviations.

  • cve-research

    Use when checking a specific dependency or package version for known CVEs and security advisories.

  • dependency-audit

    Use when running ecosystem-specific vulnerability scans across project dependencies (npm/composer/pip/cargo/go/etc), with optional auto-fix.

  • security-headers

    Use when verifying or configuring HTTP security headers (CSP, HSTS, CORS, X-Frame-Options) for a web application (Next.js, Laravel, Express, Django).

  • security-scan

    Use when scanning for XSS, SQL injection, command injection, hardcoded secrets, or any OWASP Top 10 vulnerability across a codebase.

Slash commands (1)

  • /fuse-security:scan

    Launch a comprehensive security audit on the current project. Detects vulnerabilities, scans dependencies, checks OWASP Top 10, and generates a structured report.

Subagents (1)

  • security-expert

    Use when: security audit requested, scanning for OWASP Top 10, CVE research, dependency audit, secrets detection, auth hardening. Do NOT use for: general code quality (use sniper), feature implementation.

Hooks (2)

  • PreToolUse

    bun $HOME/.claude/plugins/marketplaces/fusengine-plugins/plugins/node_modules/@fusengine/harness/dist/cli/bin.mjs hook claude-code security

  • PostToolUse

    bun $HOME/.claude/plugins/marketplaces/fusengine-plugins/plugins/node_modules/@fusengine/harness/dist/cli/bin.mjs hook claude-code security

View source on GitHub

More from fusengine/agents

All 26 plugins →

fuse-ai-pilot

claude

AI Pilot workflow: APEX methodology (auto-detects Laravel/Next.js/React/Swift), sniper (7-phase code quality + DRY detection), research-expert, explore-codebase

18 skills · 12 commands · 9 agents · hooks

34

fuse-seo

claude

SEO/GEO 2026 plugin: technical SEO, schema markup, E-E-A-T, AI Overviews/ChatGPT/Perplexity optimization, local SEO, sitemaps, hreflang, internal linking, semantic clustering, search experience. Local-first, zero third-party APIs.

21 skills · 9 agents · hooks

34

fuse-laravel

claude

Expert Laravel 13 + PHP 8.3+ with SOLID principles, first-class PHP Attributes, Laravel AI SDK, JSON:API Resources, native vector search (pgvector), Eloquent, Livewire, queues with routing, and comprehensive documentation

23 skills · 1 agent · hooks

34

fuse-tailwindcss

claude

Expert Tailwind CSS v4.3 with CSS-first config, @theme, @utility, @variant, Oxide engine, OKLCH colors, container queries

16 skills · 1 agent · hooks

34

fuse-design

claude

UI Designer. Generates HTML/CSS via Gemini Design MCP. 7-phase pipeline with state tracking. Identity System, UX copy, page layouts, motion system, design audit. Anti-AI-Slop, WCAG 2.2.

9 skills · 5 commands · 1 agent · hooks

34

fuse-astro

claude

Expert Astro 7 with Islands Architecture, Content Layer API, Server Actions, Server Islands, UI framework integrations (React/Vue/Svelte/Solid), SEO, Starlight docs, i18n, and deployment

14 skills · 1 agent

34

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

AAS Security Engineer

codex

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

security-scanning

claudecodex

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain fuse-security?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins26 plugins