Cursor rule Cursor
Optimize codebase-to-config mapping: tech-flag detection heuristics (reuses hawkscan's evidence-file detection), plugin selection from a base preset, stackhawk.yml correctness (app type, OpenAPI, GraphQL, auth), and the default-balanced speed-vs-coverage profile lean.
Cursor rule Cursor
Optimize post-scan metrics refine loop: MetricsJson schema (paths/operations/flags/health), flag-to-lever mapping (concurrency for rate-limited/timeout-prone; excludePaths for heavy/slow paths; auth for auth-wall), auto-vs-confirm tiers, concurrency step-down (halve from current, floor 1), and the capped refine loop.
Cursor rule Cursor
Optimize trial lifecycle: how a named scan policy reaches a scan via S3 download (non-destructive), deterministic OPTIMIZETRIAL naming, crash-safe create/promote/discard sequences (orphan-policy and backup-file guards, reconstruct from the live policy), and failure handling.
Cursor rule Cursor
Use when the user asks to optimize, tune, or speed up a HawkScan scan, reduce false positives, or pick the right scan policy/plugins/tech flags for an app — or invokes /optimize. Analyzes the codebase, builds an isolated trial scan policy, runs one trial scan, and promotes or discards. Do NOT use for a normal scan or…
Plugin Claude Code
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Uses the combined hawk CLI (hawk op …) for all platform queries.
Skill Claude CodeCodex
Use this skill when a user or agent needs to query the StackHawk platform for security reporting, findings analysis, or app management. Triggers include: "stackhawk api", "security posture", "findings report", "show me findings", "untriaged findings", "which apps", "scan history", "security dashboard", "triage", "what…
Plugin Claude Code
Configure HawkScan in your CI/CD pipeline. Provider-agnostic: detects GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure Pipelines, Bitbucket, Buildkite, and other CI systems from repo files, edits the pipeline file in place to add a HawkScan job, and prompts for HAWKAPIKEY storage (CI-native secrets store or extern.
Skill Claude CodeCodex
Use when the user wants to WIRE HawkScan into a CI/CD pipeline config file — triggers on "set up hawkscan in CI", "add stackhawk to my pipeline", "scan in CI", "configure github actions / gitlab / jenkins / circleci for hawkscan", "wire hawkscan into ci/cd", or any provider-named variant. Provider-agnostic: detects…
Plugin Claude Code
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.
Hook
Runs when a session starts on startup, resume, clear and compact, executing run-hook.cmd. From stackhawk/agent-skills.
Hook
Runs after a tool call finishes for Bash and Skill tool calls, executing run-hook.cmd (2 commands). From stackhawk/agent-skills.
Hook
Runs when the agent finishes a response, executing run-hook.cmd. From stackhawk/agent-skills.
Skill Claude CodeCodex
Runs the HawkScan DAST security loop — configure, scan, fix all reported vulnerabilities (not just your changes), rescan to verify. Performs code-first discovery to configure high-value scans, and quality-gates every scan against code-derived expectations before findings are parsed. Use when the user asks to run or…
Plugin Claude Code
Analyze a codebase and produce an optimal HawkScan setup (tech flags, scan-policy plugin selection, stackhawk.yml corrections), apply it as a non-destructive trial, run one trial scan, and promote or discard.
Skill Claude CodeCodex
Analyze a codebase and produce an optimal HawkScan setup — tech flags, scan-policy plugin selection, and stackhawk.yml corrections — then apply it as a non-destructive trial, run ONE trial scan, and promote or discard. Use when the user asks to "optimize my scan", "tune HawkScan", "make my scan faster", "reduce false…
Plugin Claude Code
Read a target repo and emit checked-in seed artifacts so HawkScan has data to scan. Generates SQL / HTTP / gRPC / Mongo / shell steps across the target repo and any upstream services it depends on, plus a manifest and a credentials handoff file that hawkscan consumes.
Skill Claude CodeCodex
Set up checked-in seed data so authenticated HawkScan can reach non-trivial paths. Drives the hawk perch seed preflight, designs the minimum seed manifest from the repo digest, then validates and finalizes it via hawk perch seed validate / finalize — emitting reviewed artifacts under data-seed/ (manifest.yaml…
Plugin Claude Code
StackHawk umbrella plugin — installs the default StackHawk skill set (hawkscan, api, data-seed, optimize) in one command for the combined hawk CLI.
Skill Claude CodeCodex
Use this skill when a user or agent needs to query the StackHawk platform for security reporting, findings analysis, or app management. Triggers include: "stackhawk api", "security posture", "findings report", "show me findings", "untriaged findings", "which apps", "scan history", "security dashboard", "triage", "what…
Skill Claude CodeCodex
Analyze a codebase and produce an optimal HawkScan setup — tech flags, scan-policy plugin selection, and stackhawk.yml corrections — then apply it as a non-destructive trial, run ONE trial scan, and promote or discard. Use when the user asks to "optimize my scan", "tune HawkScan", "make my scan faster", "reduce false…
Instructions file
Claude Code instructions for stackhawk/stackhawk-mcp, covering claude.md, project overview, development commands, testing and run all tests.
MCP server Claude CodeCodexCursor +2
StackHawk MCP Server for Security Analytics and Developer Integration. Runs locally from the stackhawk-mcp Python package. Needs 1 environment variable to run.