stackhawk/agent-skills

Security testing skills for AI coding agents. Find and fix exploitable vulnerabilities without leaving your workflow.

15Stars on the repository
44Mods indexed here, across every type
12d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

stackhawk

01

stackhawk/agent-skills

Plugin Claude Code

Official StackHawk skills for Claude. Dynamic application and API security testing (DAST) powered by HawkScan.

15 12d ago A tokens not measured original MIT

api

02

stackhawk/agent-skills

Plugin Claude Code

Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Uses the combined hawk CLI (hawk op …) for all platform queries.

15 12d ago A tokens not measured original MIT

hawkscan-ci

03

stackhawk/agent-skills

Plugin Claude Code

Configure HawkScan in your CI/CD pipeline. Provider-agnostic: detects GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure Pipelines, Bitbucket, Buildkite, and other CI systems from repo files, edits the pipeline file in place to add a HawkScan job, and prompts for HAWKAPIKEY storage (CI-native secrets store or extern.

15 12d ago A tokens not measured original MIT

hawkscan

04

stackhawk/agent-skills

Plugin Claude Code

Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.

15 12d ago A tokens not measured original MIT

optimize

05

stackhawk/agent-skills

Plugin Claude Code

Analyze a codebase and produce an optimal HawkScan setup (tech flags, scan-policy plugin selection, stackhawk.yml corrections), apply it as a non-destructive trial, run one trial scan, and promote or discard.

15 12d ago A tokens not measured original MIT

stackhawk-data-seed

06

stackhawk/agent-skills

Plugin Claude Code

Read a target repo and emit checked-in seed artifacts so HawkScan has data to scan. Generates SQL / HTTP / gRPC / Mongo / shell steps across the target repo and any upstream services it depends on, plus a manifest and a credentials handoff file that hawkscan consumes.

15 12d ago A tokens not measured original MIT

wingman

07

stackhawk/agent-skills

Plugin Claude Code

StackHawk umbrella plugin — installs the default StackHawk skill set (hawkscan, api, data-seed, optimize) in one command for the combined hawk CLI.

15 12d ago A tokens not measured original MIT