api
Use this skill when a user or agent needs to query the StackHawk platform for security reporting, findings analysis, or app management. Triggers include: "stackhawk api", "security posture", "findings report", "show me findings", "untriaged findings", "which apps", "scan history", "security dashboard", "triage", "what needs attention". Uses the hawk CLI (`hawk op` subcommand) for all platform queries. Do NOT use for running scans (use the hawkscan skill for "scan my app", "hawkscan", "stackhawk.yml", "DAST") or for fixing/remediating code or vulnerabilities — this skill only reads and reports platform data.
Install
With your agent
Install OMGSkills skill "stackhawk/agent-skills:plugins/api/skills/api" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/stackhawk/agent-skills /tmp/agent-skills && ln -s /tmp/agent-skills/plugins/api/skills/api ~/.claude/skills/apiFrom README
StackHawk API Skill This skill enables Claude to act as a security reporting agent against the StackHawk platform. The core workflow is: Question → Authenticate → Query API via hawk op → Present Results → Suggest Next Actions All platform queries run through the hawk binary's op subtree (hawk op …). It authenticates, refreshes tokens, follows pagination, and emits stable JSON. There is no raw-REST fallback — if hawk is unavailable, it and run hawk init --browser rather than hand-rolling curl. See references/hawk-op-shortcuts.md. --- Step 1: Assess Context Before making any calls, check what's available: Is hawk installed and configured? (hawk version reports v6.0.0 or greater) valid org + JWT → proceed. installed but unconfigured → hawk init --browser (interactive; the combined binary has no hawk op init — hawk init writes /.hawk/hawk.properties, which hawk op reads along with the HAWKAPIKEY env var).