Language:JapaneseEnglish

stackhawk-hawkscan Claude Code Plugin

Author
StackHawk
Category
Security
Topics
Security, Auth & Compliance · Code Quality, Review & Testing
License
MIT(opens in a new tab)
Version
2.6.0
First cataloged
2026-07-21 (UTC)
Explanation last updated
2026-09-17 (UTC)
Source (GitHub) last updated
2026-10-28 (UTC) (7 days ago)

The explanation below is AI-generated. Please verify it against the sources.

This plugin is a Claude Code skill that lets Claude operate StackHawk's HawkScan dynamic application security testing (DAST) tool as part of an agentic coding workflow. It can generate or adjust a stackhawk.yml configuration file based on an application's stack and authentication method, then trigger scans through the hawk CLI or a Docker image. After a scan, it parses the resulting findings and turns them into prioritized remediation tasks for the coding agent, and it can re-run scans afterward to check whether fixes resolved the issues. According to the README, it validates configuration before running a full scan to avoid wasting scan runs. Using the skill requires a StackHawk account, an API key, and either the HawkScan CLI or Docker installed locally.

About the service

StackHawk is a cloud-hosted dynamic application security testing service. According to the sources, users sign up for a StackHawk account, generate an API key from account settings, and use that key (via local credential storage or an environment variable) to authenticate scans, retrieve findings, and manage applications on the StackHawk platform.

What you can do with stackhawk-hawkscan

  • Generate or tune a stackhawk. yml configuration based on the application's stack and auth pattern
  • Run HawkScan scans via the hawk CLI or a Docker image
  • Validate configuration before consuming a full scan run
  • Parse scan findings into prioritized, actionable fix tasks

Sources

History of stackhawk-hawkscan

  • Claude Code Plugin Added stackhawk-hawkscan

Back to list