wingman
claudecodexStackHawk umbrella — one-command install of the default skill set (hawkscan, api, data-seed, optimize).
4 skills
16
claudecodex
hawkscan
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.
/
Plugin hawkscan from marketplace stackhawk in stackhawk/agent-skills. Commands read from the repo's manifest — yesterday.
This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.
What it installs
Skills (1)
hawkscanRuns the HawkScan DAST security loop — configure, scan, fix all reported vulnerabilities (not just your changes), rescan to verify. Performs code-first discovery to configure high-value scans, and quality-gates every scan against code-derived expectations before findings are parsed. Use when the use
Hooks (4)
- SessionStart
"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook.cmd" session-start
- PostToolUse
"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook.cmd" post-commit-scan
- PostToolUse
"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook.cmd" skill-activated
- Stop
"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook.cmd" stop
More from stackhawk/agent-skills
All 6 plugins →hawkscan-ci
claudecodexConfigure HawkScan in your CI/CD pipeline. Provider-agnostic: detects GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure Pipelines, Bitbucket, Buildkite, and other CI systems from repo files, edits the pipeline file in place, and prompts for HAWK_API_KEY storage (CI-native secrets store or external secrets manager).
1 skill
16
stackhawk-api
claudecodexQuery the StackHawk platform API for security posture reporting, findings analysis, and app management.
1 skill
16
stackhawk-data-seed
claudecodexRead a target repo and emit checked-in seed artifacts so HawkScan has data to scan. Generates SQL / HTTP / gRPC / Mongo / shell steps across the target repo and any upstream services it depends on, plus a manifest and a credentials handoff file that hawkscan consumes.
1 skill
16
stackhawk-optimize
claudecodexAnalyze a codebase and produce an optimal HawkScan setup (tech flags, scan policy, stackhawk.yml), apply it as a non-destructive trial, run one trial scan, and promote or discard.
1 skill
16
Similar plugins
ecc
claudecodexHarness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
affaan-m/ECC 302,088
security-guidance
claudeSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
anthropics/claude-code 155,476
ruflo-federation
claudeCross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
ruvnet/ruflo 81,589
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
sickn33/agentic-awesome-skills 49,620
duende-skills
claudecodexDuende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
anthropics/claude-plugins-official 47,076
security-scanning
claudecodexSAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
Maintain hawkscan?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins6 plugins