Fusion 360 Bridge Plugin
OpenClaw plugin for controlling Fusion 360 through the FusionBridge add-in
Community code plugin. Review compatibility and verification before install.
@smicbee/fusion-360-bridge-plugin · runtime id fusion-360-bridge
Install
openclaw plugins install clawhub:@smicbee/fusion-360-bridge-pluginLatest Release
Version 0.1.1
Compatibility
{
"builtWithOpenClawVersion": "0.1.0",
"pluginApiRange": ">=2026.3.24"
}Capabilities
{
"bundledSkills": [],
"capabilityTags": [
"executes-code"
],
"channels": [],
"commandNames": [],
"configSchema": true,
"configUiHints": false,
"executesCode": true,
"hooks": [],
"httpRouteCount": 0,
"materializesDependencies": false,
"providers": [],
"runtimeId": "fusion-360-bridge",
"serviceNames": [],
"setupEntry": false,
"toolNames": []
}Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim to expose Fusion 360 Bridge endpoints; the code and SKILL.md implement exactly that (ping, state, logs, exec). All required pieces (baseUrl, timeout) are directly related to the stated purpose.
Instruction Scope
Instructions and code only perform HTTP calls to a configurable baseUrl (default http://127.0.0.1:8765). They include a powerful /exec tool that posts arbitrary Python to be executed by the Fusion add-in — this is expected for a bridge plugin but is a high-impact capability. The SKILL.md explicitly warns that there is no authentication and not to expose the bridge publicly.
Install Mechanism
No install spec; this is an instruction-only plugin with a single TypeScript extension file. Nothing is downloaded from remote URLs and nothing is written to disk by an installer.
Credentials
The plugin requires no environment variables, credentials, or config paths. The configuration schema only exposes baseUrl and timeoutMs which are directly relevant.
Persistence & Privilege
always is false (no forced global inclusion). The plugin registers tools for agent invocation as expected and does not attempt to modify other plugins or system-wide settings.
Assessment
This plugin appears to do exactly what it says: call a FusionBridge HTTP API on the configured host. Important cautions before installing: (1) the /exec tool sends arbitrary Python to be executed inside the Fusion 360 add-in — only enable this if you trust the Fusion host and the code you or the agent will send; (2) the bridge currently has no authentication (the README and SKILL.md warn of this) — ensure the baseUrl is reachable only on a trusted, private network and never expose the port to the public internet; (3) consider whether you want an agent with autonomous invocation to have the ability to call /exec (it can be powerful and dangerous); and (4) because there are no requested credentials or installs, the plugin's access surface is limited to network calls to the configured bridge host, which is coherent with its purpose.openclaw.plugin.json:12
Install source points to URL shortener or raw IP.
About static analysis
These patterns were detected by automated regex scanning. They may be normal for skills that integrate with external APIs. Check the VirusTotal and OpenClaw results above for context-aware analysis.Verification
{
"hasProvenance": false,
"scanStatus": "clean",
"scope": "artifact-only",
"sourceCommit": "a7424e4ef5a47ef19710d6e09bfb015f54f47af0",
"sourceRepo": "smicbee/fusion-360-bridge",
"sourceTag": "a7424e4ef5a47ef19710d6e09bfb015f54f47af0",
"summary": "Validated package structure and linked the release to source metadata.",
"tier": "source-linked"
}Tags
{
"latest": "0.1.1"
}Fusion 360 Bridge (OpenClaw Plugin)
This package exposes the Fusion 360 Bridge endpoints to OpenClaw as tools. It is intended to be used only when the Fusion 360 add-in is installed and running on a machine reachable from OpenClaw.
Tools
fusion_bridge_pingGET /pinghealth check
fusion_bridge_stateGET /stateruntime status, queue status and pump state
fusion_bridge_logsGET /logsdebug/event log output
fusion_bridge_execPOST /execraw Python execution in Fusion
Install from local checkout
cd <path-to-openclaw-workspace>
openclaw plugins install --link <path-to-repo>/openclaw-plugin
Minimal plugin config
plugins:
entries:
fusion-360-bridge:
enabled: true
config:
# IP of machine running Fusion 360
baseUrl: http://<fusion-host-ip>:8765
# HTTP timeout for plugin requests
timeoutMs: 10000
Notes
- The default bridge port is 8765.
- For remote calls, the Fusion host must be reachable on that port from the OpenClaw machine.
- The add-in executes raw Python directly. Keep scripts idempotent for safer automation.
- No authentication is implemented yet; do not expose the bridge publicly.
