Codex

Install

codex plugin marketplace add stackhawk/agent-skills
codex plugin add hawkscan@stackhawk
codex plugin add stackhawk-api@stackhawk

Install hawk and hawkop

brew tap stackhawk/cli && brew install hawk hawkop

Then authenticate both CLIs:

hawk init
hawkop init

hawk init prompts for your API key (hawk.xxxxxxxxxx.xxxxxxxxxx) — get one at app.stackhawk.com → Settings → API Keys. hawkop init picks up the key automatically and prompts for your default organization.

Verify

After installation, ask Codex: “What StackHawk skills do you have?”

Usage

Ask Codex to scan your application:

Scan my app running on localhost:8080 for security vulnerabilities

Codex will configure HawkScan, run the scan, parse findings, and help you fix them.

Tips

• The agent checks if your app is running and will prompt you to start it if needed
• For authenticated endpoints, describe your auth pattern and Codex will configure the scan
• Use hawk validate config stackhawk.yml to debug config issues