stackhawk-data-seed Cursor ruleA
stackhawk-data-seed from stackhawk/agent-skills is a Cursor rule: instructions the Cursor agent follows in that repo.
mdr add stackhawk/agent-skills/cursor/.cursor/rules/stackhawk-data-seed.mdc@git:20260708.5dcc3ebPins git:20260708.5dcc3eb in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 14 of 14 checks passed
- Kind
- Cursor rule
- Repository
- stackhawk/agent-skills
- Path
cursor/.cursor/rules/stackhawk-data-seed.mdc- Versions recorded
- 5
- Latest version
- git:20260708.5dcc3eb, committed Jul 8, 2026
- First version recorded
- Jun 2, 2026
- Size
- 9,828 bytes
- Repository stars
- 16
- License
- MIT
Use when the user says "set up data for HawkScan", "my scan has no data to hit", "seed this repo for scanning", or as a first-time-setup step before invoking hawkscan on a fresh repo. Drives the 'hawk perch seed' subcommands (preflight, validate, finalize): runs the static pre-flight, designs the minimum seed manifest from the repo digest, then validates and finalizes reviewed artifacts under data-seed/ (SQL / HTTP / gRPC / Mongo / shell scripts, a manifest.yaml, and a…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# StackHawk Data Seed Skill This skill produces checked-in, reproducible seed-data artifacts for a target repo so authenticated HawkScan finds non-empty results. The `hawk perch seed` command provides the deterministic steps — a static repo **pre-flight** (storage + upstream detection), a manifest **validator**, and an artifact **finalizer**. This skill supplies the reasoning between them: it reads the pre-flight's digest and designs the minimum seed manifest. It works the same across every agent that can run a subprocess and read its output. It does NOT run the artifacts, start the environment, or write `stackhawk.yml` — those belong to the human, the user's tooling, and the `hawkscan` skill respectively. --- ## When to Run Invoke explicitly when: - User says "set up data for HawkScan" / "seed this repo" / "my scan has no data to hit." - Configuring HawkScan against a repo for the first time and the app needs authenticated routes to scan. - A previous `data-seed/` exists but the data shape changed (new entity types, new upstream service). Do NOT run autonomously after code changes — this is a setup tool, not a per-commit safety net. --- ## Phase 0: Preflight …
Read the whole file at its exact version.
How to install
mdr add stackhawk/agent-skills/cursor/.cursor/rules/stackhawk-data-seed.mdc@sha256:13edf55167628e23The line at the top of this page pins the label git:20260708.5dcc3eb, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_7w2xu4ebhhj4wf2q)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Jun 2, 2026 and Jul 8, 2026, about one every 9 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260708.5dcc3eb latest | 2026-07-08 | 5dcc3eb | 9,828 B | A | view · diff |
| git:20260630.b97573a | 2026-06-30 | b97573a | 9,708 B | A | view · diff |
| git:20260606.71c017d | 2026-06-06 | 71c017d | 9,710 B | A | view · diff |
| git:20260606.0ac230b | 2026-06-06 | 0ac230b | 9,476 B | A | view · diff |
| git:20260602.1e0be3a | 2026-06-02 | 1e0be3a | 5,099 B | A | view |
Audit of the latest version
- pass: Size between 200 bytes and 200 KB (9828 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
stackhawk/agent-skills · 16 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_7w2xu4ebhhj4wf2q GET https://markdownregistry.com/api/v1/resolve?ref=stackhawk/agent-skills/cursor/.cursor/rules/stackhawk-data-seed.mdc GET https://markdownregistry.com/api/v1/blob/13edf55167628e235ee2cb996604155b00dd6f6b78d7db2a26d576a68d6fb41a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: Cursor rules vs AGENTS.md · which agent file does what.
More from stackhawk/agent-skills
Every file in stackhawk/agent-skills