Claude Code mod
ruflo-security-audit
Security review, dependency scanning, policy gates, and CVE monitoring
Install
/plugin marketplace add ruvnet/ruflo
/plugin install ruflo-security-audit@rufloMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L2Writes or runs: writes files
- Sees
- every tool call
- Hooks
session.starttool.callcommand.run
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- ruvnet/ruflo
- Folder
plugins/ruflo-security-audit- Marketplace
ruflo- Author
- ruvnet
- License
- MIT
- Last updated
- 1 November 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is ruflo-security-audit?
Security review, dependency scanning, policy gates, and CVE monitoring It is a mod for Claude Code, from ruvnet/ruflo on GitHub.
What can the ruflo-security-audit mod access?
Its widest reach is "writes or runs" (writes files). It sees every tool call. Like any mod, it runs with your permissions.
How do I install ruflo-security-audit?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add ruvnet/ruflo and then /plugin install ruflo-security-audit@ruflo.
Is ruflo-security-audit popular?
ruvnet/ruflo has 80,469 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 1 November 2026.
More pane & dashboard mods
pinboard
14sirkitree/pinboard
Keeps open decisions, the task list and links Claude creates in a sidebar pane, updated through its own tool
catch-me-up
5oliverow/catch-me-up
A side pane with a live catch-up summary of your Claude Code session: why it started, what was done, where things stand, and what needs you
jev-blindspot-band
14jsk4581/jev-blindspot
A one-glance summary of jev-blindspot in the band above the prompt: the blind spot count, the deeper question, and the top findings for the prompt you just sent.
cc-mod-park
13GGGODLIN/cc-mod-park
/park a session you will come back to; a new session in the same folder offers it back with one click.
flow-scenes
14robdmac/flow
Ambient scenes above the prompt that move with your agent's work: a fire, bubbles, surf, ski, rockets, a hot-air balloon and more, by day or night. /flow to control it.
critical-decisions
13Mucida/critical-decisions
Shows you, above the prompt, the critical decisions the agent made without being asked: red to rethink, yellow to know, each with a rethink button. Works out of the box for any kind of project; /critical-areas auto lets the agent learn what is critical in yours.
Browse the most popular Claude Code mods, all pane & dashboard mods, or the skills and MCP server directories.