Cursor rule Cursor
Use when the user asks to optimize, tune, or speed up a HawkScan scan, reduce false positives, or pick the right scan policy/plugins/tech flags for an app — or invokes /optimize. Analyzes the codebase, builds an isolated trial scan policy, runs one trial scan, and promotes or discards. Do NOT use for a normal scan or…
Plugin Claude Code
Bundles 1 skill · 147 tokens together
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Uses the combined hawk CLI (hawk op …) for all platform queries.
Plugin Claude Code
Bundles 1 skill · 232 tokens together
Configure HawkScan in your CI/CD pipeline. Provider-agnostic: detects GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure Pipelines, Bitbucket, Buildkite, and other CI systems from repo files, edits the pipeline file in place to add a HawkScan job, and prompts for HAWKAPIKEY storage (CI-native secrets store or extern.
Plugin Claude Code
Bundles 1 skill, 3 hooks · 217 tokens together
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.
Plugin Claude Code
Bundles 1 skill · 222 tokens together
Analyze a codebase and produce an optimal HawkScan setup (tech flags, scan-policy plugin selection, stackhawk.yml corrections), apply it as a non-destructive trial, run one trial scan, and promote or discard.
Plugin Claude Code
Bundles 1 skill · 159 tokens together
Read a target repo and emit checked-in seed artifacts so HawkScan has data to scan. Generates SQL / HTTP / gRPC / Mongo / shell steps across the target repo and any upstream services it depends on, plus a manifest and a credentials handoff file that hawkscan consumes.
Plugin Claude Code
Bundles 2 skills · 373 tokens together
StackHawk umbrella plugin — installs the default StackHawk skill set (hawkscan, api, data-seed, optimize) in one command for the combined hawk CLI.
Plugin Gemini CLI
StackHawk security scanning and API reporting skills. AUTONOMOUS: After completing any code change, invoke the hawkscan skill to scan, fix all reported vulnerabilities (not just your changes), and rescan to verify. Also invoke for any mention of hawkscan, stackhawk, DAST, security scan.
Cursor rule Cursor
HawkScan input-vectors reference: active injection rules need a reachable sink; HAR seed (hawk.spider.har) for XML and other non-JSON request bodies because the OpenAPI request builder emits JSON for application/xml operations and blocks XXE; app.openApiConf.customVariables scoped per resource with path regex and the…
Cursor rule Cursor
HawkScan scan-policy reference: first scan is one broad detected-stack policy run to completion; broadest scan runs last because the last completed scan is the result; follow-up full scans prune tech flags or fix auth/spec instead of raising strength; a named org policy attaches only via app.scanPolicy.name…
Cursor rule Cursor
HawkScan multi-profile authorization scanning (BOLA/BFLA): autonomous trigger from code authorization signals, find/make/ask credential ladder with HAWKPROFILE env vars, app.authentication.profiles templates (globalParameters map, required top-level credential slot), --profile-scan-mode=primary-full with…
MCP server Claude CodeCodexCursor +2
StackHawk MCP Server for Security Analytics and Developer Integration. Runs locally from the stackhawk-mcp Python package. Needs 1 environment variable to run.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: