Cursor

Install (Recommended)

Install StackHawk rules to your global Cursor config so they’re available in every project:

# Clone the agent-skills repo
git clone https://github.com/stackhawk/agent-skills.git /tmp/stackhawk-skills

# Copy Cursor rules to your global Cursor config
mkdir -p ~/.cursor/rules
cp -r /tmp/stackhawk-skills/cursor/.cursor/rules/* ~/.cursor/rules/

# Clean up
rm -rf /tmp/stackhawk-skills

Global rules in ~/.cursor/rules/ are loaded automatically in every project you open.

Install — Per-Project (Alternative)

To distribute rules to a team via a specific repo:

git clone https://github.com/stackhawk/agent-skills.git /tmp/stackhawk-skills
cp -r /tmp/stackhawk-skills/cursor/.cursor/rules/* your-project/.cursor/rules/
rm -rf /tmp/stackhawk-skills
git add .cursor/rules
git commit -m "feat: add StackHawk DAST rules for Cursor"

Set Your API Key

export HAWK_API_KEY=hawk.xxxxxxxxxxxxxxxxxxxx

Verify

Open any project in Cursor. Ask the AI: “What StackHawk rules do you have?” It should describe HawkScan scanning and API reporting capabilities.

Usage

Ask Cursor’s AI to scan your application:

Scan my app running on localhost:8080 for security vulnerabilities

Tips

• Install once, scan everywhere: Global rules in ~/.cursor/rules/ work across all projects
• Team distribution: For team-wide rollout, commit .cursor/rules/stackhawk-*.mdc files to your repos
• The rules are split into 10 modular files so Cursor loads only what’s relevant for the current task
• The agent checks if your app is running and will prompt you to start it if needed