stackhawk/agent-skills

stackhawk/agent-skills · .claude/skills/skill-authoring/SKILL.md · Guides authoring and maintaining agent skills in this repository — enforcing Anthropic best practices, release-version…

stackhawk/agent-skills · AGENTS.md

stackhawk/agent-skills · CLAUDE.md

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-api-hawk-op.mdc · hawk op shortcuts for the StackHawk API: user intent → single hawk op command mapping for scan drill-down…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-api-recipes.mdc · StackHawk API reporting recipes: org security posture summary, app deep dive (scan -> alerts -> findings), stale apps…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-api.mdc · Use when querying the StackHawk platform for security reporting, findings analysis, or app management. Triggers include…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-data-seed.mdc · Use when the user says "set up data for HawkScan", "my scan has no data to hit", "seed this repo for scanning", or as a…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-ci-app-startup.mdc · HawkScan CI app-startup patterns reference: Docker Compose + wait-for-it, GitLab services keyword, GitHub Actions…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-ci-execution-shapes.mdc · HawkScan CI execution shapes reference: native action (stackhawk/hawkscan-action) vs Docker image (stackhawk/hawkscan)…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-ci-failure.mdc · HawkScan CI failure semantics reference: exit codes 0/1/42, failureThreshold tuning, block-on-42 vs warn-only vs…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-ci.mdc · Use when the user wants to WIRE HawkScan into a CI/CD pipeline config file — triggers on "set up hawkscan in CI", "add…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-cli.mdc · hawk CLI reference: scan commands and flags (--json-output, --verbose, --debug, --trace), validate commands (config…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-config.mdc · stackhawk.yml cross-cutting config patterns: env var interpolation (${VAR:default}, whole-value rule)…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-docker.mdc · HawkScan Docker usage: standard container run, scanning localhost apps, custom config files, environment variables, CI…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-false-positives.mdc · HawkScan false positives guide: identifying false positives, deciding fix vs suppress, excludePaths and…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-findings.mdc · HawkScan findings reference: JSON output schema (--json-output), field reference, thresholdResult to exit code mapping…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-high-iteration.mdc · HawkScan high-iteration findings guide: per-finding fix guidance for CSP, CORS, Auth (unprotected endpoint), and…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-input-vectors.mdc · HawkScan input-vectors reference: active injection rules need a reachable sink; HAR seed (hawk.spider.har) for XML and…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-install.mdc · HawkScan installation: Homebrew (macOS), manifest-driven binary download, package installers (.pkg/.msi), verification…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-model.mdc · HawkScan StackHawk platform model: Org → App → Env → Scan hierarchy, what goes in stackhawk.yml vs what doesn't…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-multi-profile.mdc · HawkScan multi-profile authorization scanning (BOLA/BFLA): autonomous trigger from code authorization signals…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-openapi-specs.mdc · HawkScan OpenAPI spec accuracy reference: framework-generic procedure for getting an accurate OpenAPI spec into…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-scan-planning.mdc · HawkScan scan-planning (discovery) reference: code-first discovery of an app's API surfaces before writing or editing…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-scan-policy.mdc · HawkScan scan-policy reference: first scan is one broad detected-stack policy run to completion; broadest scan runs…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan-scan-quality.mdc · HawkScan scan-quality (post-scan quality gate) reference: run after every scan and rescan, before findings become fix…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-hawkscan.mdc · HawkScan DAST security scanning. Use when the user asks to run or perform a security or DAST scan, to test an app or…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-optimize-cli.mdc · Optimize hawk op CLI contract: policy list/get/create/delete/assign and scan metrics commands the skill orchestrates…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-optimize-mapping.mdc · Optimize codebase-to-config mapping: tech-flag detection heuristics (reuses hawkscan's evidence-file detection), plugin…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-optimize-metrics.mdc · Optimize post-scan metrics refine loop: MetricsJson schema (paths/operations/flags/health), flag-to-lever mapping…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-optimize-trial.mdc · Optimize trial lifecycle: how a named scan policy reaches a scan via S3 download (non-destructive), deterministic…

stackhawk/agent-skills · cursor/.cursor/rules/stackhawk-optimize.mdc · Use when the user asks to optimize, tune, or speed up a HawkScan scan, reduce false positives, or pick the right scan…

stackhawk/agent-skills · plugins/api/skills/api/SKILL.md · Use this skill when a user or agent needs to query the StackHawk platform for security reporting, findings analysis, or…

stackhawk/agent-skills · plugins/hawkscan-ci/skills/hawkscan-ci/SKILL.md · Use when the user wants to WIRE HawkScan into a CI/CD pipeline config file — triggers on "set up hawkscan in CI", "add…

stackhawk/agent-skills · plugins/hawkscan/skills/hawkscan/SKILL.md · Runs the HawkScan DAST security loop — configure, scan, fix all reported vulnerabilities (not just your changes)…

stackhawk/agent-skills · plugins/optimize/skills/optimize/SKILL.md · Analyze a codebase and produce an optimal HawkScan setup — tech flags, scan-policy plugin selection, and stackhawk.yml…

stackhawk/agent-skills · plugins/stackhawk-data-seed/skills/stackhawk-data-seed/SKILL.md · Set up checked-in seed data so authenticated HawkScan can reach non-trivial paths. Drives the `hawk perch seed`…

stackhawk/agent-skills · plugins/wingman/copilot-skills/hawkscan/SKILL.md · Runs the HawkScan DAST security loop — configure, scan, fix all reported vulnerabilities (not just your changes)…

stackhawk/agent-skills · plugins/wingman/copilot-skills/stackhawk-api/SKILL.md · Use this skill when a user or agent needs to query the StackHawk platform for security reporting, findings analysis, or…

stackhawk/agent-skills · plugins/wingman/copilot-skills/stackhawk-data-seed/SKILL.md · Set up checked-in seed data so authenticated HawkScan can reach non-trivial paths. Drives the `hawk perch seed`…

stackhawk/agent-skills · plugins/wingman/copilot-skills/stackhawk-optimize/SKILL.md · Analyze a codebase and produce an optimal HawkScan setup — tech flags, scan-policy plugin selection, and stackhawk.yml…