Codex

Install

codex plugin marketplace add stackhawk/agent-skills-marketplace
codex plugin add wingman@stackhawk

wingman is the StackHawk umbrella plugin — one install pulls the full skill set (hawkscan, stackhawk-api, data-seed, optimize).

Install the hawk CLI

The hawk CLI is a single self-contained binary — hawkop is now bundled in as hawk op, and no separate Java install is required.

brew tap stackhawk/cli && brew trust stackhawk/cli && brew install hawk

Then authenticate:

hawk init --browser

hawk init --browser opens your browser to approve access, then provisions and saves your API key automatically — no copy/paste. (On Windows, run hawk.exe init --browser.) Prefer to manage keys yourself? Create one at app.stackhawk.com → Settings → API Keys.

Verify

After installation, ask Codex: “What StackHawk skills do you have?”

Usage

Ask Codex to scan your application:

Scan my app running on localhost:8080 for security vulnerabilities

Codex will configure HawkScan, run the scan, parse findings, and help you fix them.

Tips

• The agent checks if your app is running and will prompt you to start it if needed
• For authenticated endpoints, describe your auth pattern and Codex will configure the scan
• Use hawk validate config stackhawk.yml to debug config issues