Security testing skills for AI coding agents. Find and fix exploitable vulnerabilities without leaving your workflow.
This repository also configures its own agents. See what agent-skills tells them →
Cursor rule Cursor
HawkScan input-vectors reference: active injection rules need a reachable sink; HAR seed (hawk.spider.har) for XML and other non-JSON request bodies because the OpenAPI request builder emits JSON for application/xml operations and blocks XXE; app.openApiConf.customVariables scoped per resource with path regex and the…
Cursor rule Cursor
HawkScan scan-policy reference: first scan is one broad detected-stack policy run to completion; broadest scan runs last because the last completed scan is the result; follow-up full scans prune tech flags or fix auth/spec instead of raising strength; a named org policy attaches only via app.scanPolicy.name…
Cursor rule Cursor
HawkScan multi-profile authorization scanning (BOLA/BFLA): autonomous trigger from code authorization signals, find/make/ask credential ladder with HAWKPROFILE env vars, app.authentication.profiles templates (globalParameters map, required top-level credential slot), --profile-scan-mode=primary-full with…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: