stackhawk-api Claude Code Plugin
Claude Code PluginClaude CodeSecuritySecurity, Auth & ComplianceThe explanation below is AI-generated. Please verify it against the sources.
It authenticates using a StackHawk API key together with the hawk command-line tool, then retrieves findings, scan results, and application information to build security posture summaries. According to the README, supported queries include organization-wide risk summaries, per-application finding breakdowns, detection of applications that have gone unscanned for a while, and comparisons between two scans to surface new or resolved issues.
About the service
StackHawk is a dynamic application security testing platform that scans applications for vulnerabilities. Its API reference documentation describes endpoints for applications, scans, findings, teams, and policies, and using it requires a StackHawk account and an API key generated from the platform's settings.
What you can do with stackhawk-api
- Request an aggregate security posture summary across all applications in a StackHawk account
- Retrieve findings from the most recent scan of a specific application
- Identify applications that have not been scanned within a set recent period
- Compare two scans to see which findings are new, resolved, or changed
- List applications grouped by team, environment, or environment type
Sources
History of stackhawk-api
- Claude Code Plugin Added stackhawk-api