Agent Plugins Marketplace
← All plugins

stackhawk-optimize

v2.7.0

Analyze a codebase and produce an optimal HawkScan setup (tech flags, scan-policy plugin selection, stackhawk.yml corrections), apply it as a non-destructive trial, run one trial scan, and promote or discard.

CodexClaude Code1 Skill

By StackHawkLicense: MIT16 GitHub starsUpdated last week

Directory evidence

Runtimes
Codex and Claude Code
Parsed components
1 skill or MCP entry
Source updated
Oct 9, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →

Install stackhawk-optimize for Codex and Claude Code

Installs for the current user
codex plugin marketplace add IchenDEV/agent-plugin-mkt
codex plugin marketplace upgrade agent-plugin-marketplace
codex plugin add stackhawk-optimize@agent-plugin-marketplace

Paste and run these commands in a terminal with Codex. They add and refresh the PluginsMP catalog, then install this plugin.

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/stackhawk/agent-skills

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/optimize/.

Plugin files

plugins/optimize/
├── .codex-plugin/plugin.json
├── .claude-plugin/plugin.json
└── skills/optimize/SKILL.md

Included Skills1

optimizeskills/optimize/SKILL.md

Analyze a codebase and produce an optimal HawkScan setup — tech flags, scan-policy plugin selection, and stackhawk.yml corrections — then apply it as a non-destructive trial, run ONE trial scan, and promote or discard. Use when the user asks to "optimize my scan", "tune HawkScan", "make my scan faster", "reduce false positives", "pick the right plugins/policy for my app", or invokes /optimize. Also invoked automatically by the hawkscan skill on every fresh stackhawk.yml (Phase 0c) to set up the scan policy + tech flags (Setup mode), and re-runnable anytime via /optimize; the metrics Refine mode is surfaced when a scan is slow. Do NOT use for: a normal security scan or fixing vulnerabilities (use the hawkscan skill); querying existing findings or posture (use the api skill); or editing stackhawk.yml without optimizing/scanning. Requires an onboarded StackHawk app + env and a `hawk` build whose `hawk op` has the `policy` write commands.

Plugin manifests2

plugins/optimize/.codex-plugin/plugin.json
{
  "name": "stackhawk-optimize",
  "version": "2.7.0",
  "description": "Analyze a codebase and produce an optimal HawkScan setup (tech flags, scan-policy plugin selection, stackhawk.yml corrections), apply it as a non-destructive trial, run one trial scan, and promote or discard.",
  "author": {
    "name": "StackHawk",
    "email": "[email protected]",
    "url": "https://www.stackhawk.com"
  },
  "homepage": "https://docs.stackhawk.com",
  "repository": "https://github.com/stackhawk/agent-skills",
  "license": "MIT",
  "keywords": [
    "security",
    "appsec",
    "stackhawk",
    "hawkscan",
    "optimize",
    "scan-policy",
    "tech-flags",
    "dast"
  ],
  "skills": "./skills/"
}
plugins/optimize/.claude-plugin/plugin.json
{
  "name": "stackhawk-optimize",
  "version": "2.7.0",
  "description": "Analyze a codebase and produce an optimal HawkScan setup (tech flags, scan-policy plugin selection, stackhawk.yml corrections), apply it as a non-destructive trial, run one trial scan, and promote or discard.",
  "author": {
    "name": "StackHawk",
    "email": "[email protected]",
    "url": "https://www.stackhawk.com"
  },
  "homepage": "https://docs.stackhawk.com",
  "privacyPolicyUrl": "https://www.stackhawk.com/privacy-policy/",
  "termsOfServiceUrl": "https://www.stackhawk.com/terms-of-service/",
  "supportUrl": "https://docs.stackhawk.com/support/",
  "documentationUrl": "https://docs.stackhawk.com/ai-security/agent-skills/",
  "repository": "https://github.com/stackhawk/agent-skills",
  "license": "MIT",
  "keywords": [
    "security",
    "appsec",
    "stackhawk",
    "hawkscan",
    "optimize",
    "scan-policy",
    "tech-flags",
    "dast"
  ]
}

For maintainers

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[stackhawk-optimize on Agent Plugins Marketplace](https://pluginsmp.com/plugins/stackhawk-optimize)