From d6814df41233530df6a0e6123acd184686ba0fce Mon Sep 17 00:00:00 2001 From: allsmog Date: Fri, 12 Jun 2026 12:35:29 -0700 Subject: [PATCH] Add kuzushi --- data/tools/kuzushi.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 data/tools/kuzushi.yml diff --git a/data/tools/kuzushi.yml b/data/tools/kuzushi.yml new file mode 100644 index 000000000..310290a6c --- /dev/null +++ b/data/tools/kuzushi.yml @@ -0,0 +1,26 @@ +name: kuzushi +categories: + - linter +tags: + - c + - cpp + - go + - java + - javascript + - php + - python + - ruby + - security + - typescript +license: MIT +types: + - cli +source: 'https://github.com/allsmog/kuzushi-security-plugin' +homepage: 'https://github.com/allsmog/kuzushi-security-plugin' +description: >- + A local-first security-review pipeline that runs inside Claude Code. It hunts + source-to-sink vulnerabilities across a repository, then advances each finding + through a proof ladder: it reconstructs the exploit, proves it in a + network-denied sandbox, and validates the patch against that exploit. It also + benchmarks its own recall against planted bugs, so it reports what it missed. + Static-first with sandboxed dynamic proof; SARIF output for CI.