Home / Plugins / stackhawk-skills-for-claude
stackhawk-skills-for-claude
stackhawk/agent-skillsPlugin
Your AI coding agent is also your security team. StackHawk skills teach Claude to find security vulnerabilities as you build, report your security posture across applications, and help you fix what it finds — all without leaving your workflow. No context switching, no tickets to another team. Your agent scans, reports, and remediates. Works with Claude Code, the Claude desktop app, and anywhere Claude skills are supported.
Why this score
This repo hosts 3 add-ons, so its 16 stars are split between them (about 5 each) for scoring.
Popularity score: 57/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Nov 4, 2026 at commit 2afbfaebe5f3, with Cisco's open-source skill-scanner.
What its code does:
- Runs shell commands Common for dev tools. Read the commands it runs.evals/harnesses/README.md:3, scripts/bump-version.sh:52, scripts/generate-cursor-rules.sh:102 and 2 more
- Reads environment variables, where API keys usually liveevals/harnesses/claude-code/adapter.py:212, evals/harnesses/cursor/adapter.py:237
- Uses dependencies without a pinned version A later version of a dependency could change what runs.pyproject.toml:7 and 2 more
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Nothing from another maker does quite the same job yet.