stackhawk hawkscan — Agent Skill
by stackhawk · Updated
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.
At a glance
stackhawk-hawkscan is an Agent Skill by stackhawk in the Automation & Workflow category. In Claude Code it installs with `/plugin install stackhawk-hawkscan@claude-plugins-official` after adding the anthropics/claude-plugins-official marketplace; other assistants use its SKILL.md instructions as rules. Its source repository has 16 GitHub stars (as of Oct 28, 2026).
How to install stackhawk hawkscan in your AI client
Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.
How to install stackhawk hawkscan in Claude CodeAnthropic's agentic CLI
Add the marketplace
claude/plugin marketplace add anthropics/claude-plugins-officialInstall the skill
claude/plugin install stackhawk-hawkscan@claude-plugins-officialUse it
These are slash commands for a Claude Code session, not your shell. Claude auto-invokes the skill when your request matches its description — or type its slash command if it exposes one.
How to install stackhawk hawkscan in Claude DesktopDesktop app (MCP config)
Clone the source
bashgit clone https://github.com/stackhawk/agent-skills.gitFind the skill
It lives in agent-skills/plugins/hawkscan — that folder contains the SKILL.md.
Add the SKILL.md to your Skills folder
Settings → Capabilities → Skills → add the folder containing SKILL.md. Claude picks it up automatically.
How to install stackhawk hawkscan in CursorAI-first code editor
Clone the source
bashgit clone https://github.com/stackhawk/agent-skills.gitFind the skill
It lives in agent-skills/plugins/hawkscan — that folder contains the SKILL.md.
Convert to a Cursor rule
Create .cursor/rules/stackhawk-hawkscan.mdc and paste the SKILL.md body. Set `alwaysApply` or a glob so the Agent loads it in context.
How to install stackhawk hawkscan in Codex CLIOpenAI coding agent
Clone the source
bashgit clone https://github.com/stackhawk/agent-skills.gitFind the skill
It lives in agent-skills/plugins/hawkscan — that folder contains the SKILL.md.
Reference in AGENTS.md
Add the skill's instructions (or a link) to AGENTS.md at your repo root — Codex reads it on every run.
How to install stackhawk hawkscan in WindsurfCodeium's agentic IDE
Clone the source
bashgit clone https://github.com/stackhawk/agent-skills.gitFind the skill
It lives in agent-skills/plugins/hawkscan — that folder contains the SKILL.md.
Add to your rules / context
Paste the SKILL.md instructions into this tool's custom rules or workspace instructions so the agent follows them.
How to install stackhawk hawkscan in ClineVS Code autonomous agent
Clone the source
bashgit clone https://github.com/stackhawk/agent-skills.gitFind the skill
It lives in agent-skills/plugins/hawkscan — that folder contains the SKILL.md.
Add to your rules / context
Paste the SKILL.md instructions into this tool's custom rules or workspace instructions so the agent follows them.
How to install stackhawk hawkscan in VS CodeCopilot / MCP support
Clone the source
bashgit clone https://github.com/stackhawk/agent-skills.gitFind the skill
It lives in agent-skills/plugins/hawkscan — that folder contains the SKILL.md.
Add to your rules / context
Paste the SKILL.md instructions into this tool's custom rules or workspace instructions so the agent follows them.
Documentation
Full READMEHawkScan Skill for Claude
Dynamic application and API security testing (DAST) powered by StackHawk HawkScan, embedded directly into your Claude agentic workflow.
What This Does
This plugin teaches Claude how to act as the security testing orchestrator in an agentic coding loop:
Code changes → Configure HawkScan → Run scan → Parse findings → Generate fix tasks → RepeatClaude will automatically:
- Generate or tune
stackhawk.ymlconfiguration based on your app's stack and auth pattern - Run HawkScan via CLI (
hawk) or Docker - Validate config before burning a full scan run
- Parse scan findings and produce prioritized, actionable fix tasks
- Re-run scans after fixes to confirm remediation
Prerequisites
- A StackHawk account (free tier available)
- A StackHawk API key — generate one at Settings → API Keys
- HawkScan CLI (
hawk) or Docker installed hawk init --browserrun to store credentials locally (interactive use); orHAWK_API_KEYset for any non-interactive session (CI, containers, headless agents)
Installation
# Add the StackHawk marketplace
/plugin marketplace add stackhawk/agent-skills
# Install the HawkScan skill
/plugin install hawkscan@stackhawkUsage
Once installed, Claude will automatically use the HawkScan skill when you:
- Ask it to scan your app for security issues
- Reference
stackhawk.yml,hawkscan, or DAST - Ask it to set up security testing in your project or CI pipeline
- Have it fix code — it will proactively suggest running a scan
More Automation & Workflow skills
- Automation & Workflow54k
chrome devtools mcp
Control and inspect a live Chrome browser from your coding agent. Record performance traces, analyze network requests, check console messages with source-mapped stack traces, and automate browser actions with Puppeteer.
Claude Plugins (Official)by ChromeDevTools
- Automation & Workflow45k
agent sdk dev
Development kit for working with the Claude Agent SDK
Claude Plugins (Official)by anthropics
- Automation & Workflow45k
claude code setup
Analyze codebases and recommend tailored Claude Code automations such as hooks, skills, MCP servers, and subagents.
Claude Plugins (Official)by anthropics
- Automation & Workflow45k
claude security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when yo…
Claude Plugins (Official)by anthropics
- Automation & Workflow45k
code simplifier
Agent that simplifies and refines code for clarity, consistency, and maintainability while preserving functionality. Focuses on recently modified code.
Claude Plugins (Official)by anthropics
- Automation & Workflow45k
feature dev
Comprehensive feature development workflow with specialized agents for codebase exploration, architecture design, and quality review
Claude Plugins (Official)by anthropics
Catalog data refreshed . Something wrong? Report it.