Cursor

Install (Recommended)

Install StackHawk rules to your global Cursor config so they’re available in every project:

# Clone the agent-skills repo
git clone https://github.com/stackhawk/agent-skills.git /tmp/stackhawk-skills

# Install Cursor rules to your global config
bash /tmp/stackhawk-skills/scripts/install.sh --platform cursor --target ~

# Clean up
rm -rf /tmp/stackhawk-skills

# Clone the agent-skills repo
git clone https://github.com/stackhawk/agent-skills.git $env:TEMP\stackhawk-skills

# Install Cursor rules to your global config
& "$env:TEMP\stackhawk-skills\scripts\install.ps1" -Platform cursor

# Clean up
Remove-Item -Recurse -Force "$env:TEMP\stackhawk-skills"

Global rules in ~/.cursor/rules/ are loaded automatically in every project you open.

Install the hawk CLI

The hawk CLI is a single self-contained binary — hawkop is now bundled in as hawk op, and no separate Java install is required.

brew tap stackhawk/cli && brew trust stackhawk/cli && brew install hawk

Then authenticate:

hawk init --browser

hawk init --browser opens your browser to approve access, then provisions and saves your API key automatically — no copy/paste. (On Windows, run hawk.exe init --browser.) Prefer to manage keys yourself? Create one at app.stackhawk.com → Settings → API Keys.

Verify

Open any project in Cursor. Ask the AI: “What StackHawk rules do you have?” It should describe the StackHawk capabilities — HawkScan scanning, API reporting, and more.

Usage

Ask Cursor’s AI to scan your application:

Scan my app running on localhost:8080 for security vulnerabilities

Tips

• Install once, scan everywhere: Global rules in ~/.cursor/rules/ work across all projects
• The rules are split into 10 modular files so Cursor loads only what’s relevant for the current task
• The agent checks if your app is running and will prompt you to start it if needed