---
title: "Antigravity"
description: "Install StackHawk agent skills in Antigravity (agy) for autonomous security scanning and vulnerability fixing."
url: https://docs.stackhawk.com/ai-security/agent-skills/agy/
---

# Antigravity

## Install StackHawk Skills

```bash
agy plugin install https://github.com/stackhawk/agent-skills
```

## Install the hawk CLI

The `hawk` CLI is a single self-contained binary — `hawkop` is now bundled in as `hawk op`, and no separate Java install is required.

**Tab: macOS**

```bash
brew tap stackhawk/cli && brew trust stackhawk/cli && brew install hawk
```

**Tab: Linux**

Install `hawk` with the hawk CLI [install script](https://docs.stackhawk.com/stackhawk-cli/#install-with-a-script), then add it to your PATH:

```bash
curl -fsSL https://download.stackhawk.com/hawk/install.sh | sh
export PATH="$HOME/.hawk/bin:$PATH"
```

**Tab: Windows**

Download and run the `hawk.exe` MSI installer from the [downloads page](https://docs.stackhawk.com/downloads/hawkscan/) — self-contained, no Java required. Or install `hawk` for your user only, with no administrator access, using the hawk CLI [install script](https://docs.stackhawk.com/stackhawk-cli/#install-with-a-script):

```powershell
irm https://download.stackhawk.com/hawk/install.ps1 | iex
$env:Path = "$env:USERPROFILE\.hawk\bin;$env:Path"
```

CMD users: run the cmd.exe version of the install script instead:

```bat
curl -fsSL -o "%TEMP%\hawk-install.bat" https://download.stackhawk.com/hawk/install.bat && call "%TEMP%\hawk-install.bat"
set "PATH=%USERPROFILE%\.hawk\bin;%PATH%"
```

Then authenticate:

```bash
hawk init --browser
```

`hawk init --browser` opens your browser to approve access, then provisions and saves your API key automatically — no copy/paste. (On Windows, run `hawk.exe init --browser`.) Prefer to manage keys yourself? Create one at [app.stackhawk.com](https://app.stackhawk.com) → **Settings → API Keys**.

## Verify

After installation, ask agy: “What StackHawk skills do you have?” It should list the StackHawk skills — HawkScan scanning, API reporting, and more.

## Usage

Ask agy to scan your application:

```
Scan my app running on localhost:8080 for security vulnerabilities. Explain each step you take and each decision you make along the way.
```

agy will generate a `stackhawk.yml` config if one doesn’t exist, validate it, run the scan, and present findings.

## Tips

- The agent checks if your app is running and will prompt you to start it if needed
- For authenticated endpoints, describe your auth pattern and agy will configure the scan
- Use `hawk validate config stackhawk.yml` to debug config issues