Antigravity
Install StackHawk Skills
agy plugin install https://github.com/stackhawk/agent-skillsInstall the hawk CLI
The hawk CLI is a single self-contained binary — hawkop is now bundled in as hawk op, and no separate Java install is required.
brew tap stackhawk/cli && brew trust stackhawk/cli && brew install hawkInstall hawk with the hawk CLI install script, then add it to your PATH:
curl -fsSL https://download.stackhawk.com/hawk/install.sh | sh
export PATH="$HOME/.hawk/bin:$PATH"Download and run the hawk.exe MSI installer from the downloads page — self-contained, no Java required. Or install hawk for your user only, with no administrator access, using the hawk CLI install script:
irm https://download.stackhawk.com/hawk/install.ps1 | iex
$env:Path = "$env:USERPROFILE\.hawk\bin;$env:Path"CMD users: run the cmd.exe version of the install script instead:
curl -fsSL -o "%TEMP%\hawk-install.bat" https://download.stackhawk.com/hawk/install.bat && call "%TEMP%\hawk-install.bat"
set "PATH=%USERPROFILE%\.hawk\bin;%PATH%"Then authenticate:
hawk init --browserhawk init --browser opens your browser to approve access, then provisions and saves your API key automatically — no copy/paste. (On Windows, run hawk.exe init --browser.) Prefer to manage keys yourself? Create one at app.stackhawk.com → Settings → API Keys.
Verify
After installation, ask agy: “What StackHawk skills do you have?” It should list the StackHawk skills — HawkScan scanning, API reporting, and more.
Usage
Ask agy to scan your application:
Scan my app running on localhost:8080 for security vulnerabilities. Explain each step you take and each decision you make along the way.agy will generate a stackhawk.yml config if one doesn’t exist, validate it, run the scan, and present findings.
Tips
- The agent checks if your app is running and will prompt you to start it if needed
- For authenticated endpoints, describe your auth pattern and agy will configure the scan
- Use
hawk validate config stackhawk.ymlto debug config issues