stackhawk-api Claude Code Plugin
Claude Code PluginClaude CodeSecuritySecurity, Auth & ComplianceThe explanation below is AI-generated. Please verify it against the sources.
This plugin is a Claude skill that lets an agent query the StackHawk platform's API to check an organization's application security status. It manages authentication through the hawk command-line tool, retrieves findings and scan data, and presents the results as readable summaries with suggested next steps. It supports organization-wide posture summaries, per-application deep dives into findings, detection of applications that have gone unscanned for a while, and comparisons between scans to surface what changed. According to the homepage, this kind of AI-driven security workflow requires an active paid StackHawk subscription tier.
About the service
StackHawk is a dynamic application security testing service that scans live applications and stores data on applications, scans, findings, and teams, which can be accessed through its own API.
What you can do with stackhawk-api
- Authenticate to the StackHawk API using an API key managed locally by the hawk CLI
- Request an organization-wide summary of security findings and severity counts
- Drill into a specific application's scan results down to individual findings
- Identify applications that haven't been scanned within a chosen period
- Compare two scans to see which findings are new, resolved, or changed
- List applications grouped by team, environment, or environment type
Sources
History of stackhawk-api
- Claude Code Plugin Added stackhawk-api