Codex

Install

codex plugin marketplace add stackhawk/agent-skills-marketplace
codex plugin add wingman@stackhawk

wingman is the StackHawk umbrella plugin — one install pulls the full skill set (hawkscan, stackhawk-api, data-seed, optimize).

Install the hawk CLI

The hawk CLI is a single self-contained binary — hawkop is now bundled in as hawk op, and no separate Java install is required.

brew tap stackhawk/cli && brew trust stackhawk/cli && brew install hawk

Then authenticate:

hawk init --browser

hawk init --browser opens your browser to approve access, then provisions and saves your API key automatically — no copy/paste. (On Windows, run hawk.exe init --browser.) Prefer to manage keys yourself? Create one at app.stackhawk.com → Settings → API Keys.

Verify

After installation, ask Codex: “What StackHawk skills do you have?”

Usage

Ask Codex to scan your application:

Scan my app running on localhost:8080 for security vulnerabilities. Explain each step you take and each decision you make along the way.

Codex will configure HawkScan, run the scan, parse findings, and help you fix them.

Tips

• The agent checks if your app is running and will prompt you to start it if needed
• For authenticated endpoints, describe your auth pattern and Codex will configure the scan
• Use hawk validate config stackhawk.yml to debug config issues