June 2026 Summaries

Copilot, integrated into VS Code, serves as an AI assistant for coding, but often lacks comprehensive code review, particularly in terms of security. StackHawk addresses this gap by incorporating runtime security testing into Copilot through its agent skills. These skills, organized in a structured markdown format, teach Copilot to conduct security scans, interpret findings, rectify vulnerabilities, and verify fixes using HawkScan. By following a five-step loop—Configure, Scan, Parse, Fix, Verify—Copilot can autonomously secure code, ensuring that completed features are both functional and secure. The integration requires setting up StackHawk's API and CLIs, and installing agent skills via the Copilot plugin, which are then shared across team projects for consistent security practices. The scanning and fixing processes are automated, but manual review and triage options are available through the StackHawk platform, allowing teams to manage security findings efficiently. This setup transforms security scanning from a postponed task into an integral part of the development workflow, enhancing the overall security posture of applications.

Cursor integrates with StackHawk to enhance security scanning through the use of agent skills, which are a set of rules that allow Cursor's agent to scan, fix, and verify code within an editor environment. By installing StackHawk's agent skills, which follow a five-step loop—Configure, Scan, Parse, Fix, Verify—developers can automate the security testing of their applications. These skills are implemented as structured markdown rules within Cursor, enabling the agent to conduct security scans, identify vulnerabilities, and rectify them. The process involves setting up StackHawk's CLI tools and configuring them with an API key, after which the agent can perform scans and automatically manage findings. The integration facilitates continuous security checks as part of the development workflow, ensuring vulnerabilities are promptly addressed and verified without extensive manual intervention. Additionally, developers can review and triage findings through the StackHawk platform, allowing for efficient management of security issues.

Codex CLI is a terminal-based coding agent by OpenAI that integrates seamlessly with developers' existing tools, allowing it to read, modify, and execute code within a specified directory. To enhance runtime security testing, the guide explains how to implement StackHawk Agent Skills, enabling Codex to perform security scans, fix vulnerabilities, and verify results through a structured five-step process involving configuration, scanning, parsing findings, code fixing, and rescanning. Developers are instructed to install necessary tools and skills, such as HawkScan and StackHawk API, to facilitate this security workflow. The guide emphasizes the convenience of using StackHawk's automated skills for reviewing and triaging security findings, reducing manual intervention, and ensuring secure coding practices by enabling the same agent to both build and test features. Codex's integration with StackHawk streamlines the process of identifying and resolving security issues, thereby offering a comprehensive solution for maintaining secure applications.

On May 19, 2026, Google integrated its agentic developer tooling into Google Antigravity, its agent-first development platform, and released the Antigravity CLI, which many developers are now using for agentic coding. The platform emphasizes the importance of securing generated code, leading to direct integrations with StackHawk to identify runtime security vulnerabilities that static scanning may not detect. StackHawk provides agent skills that teach coding agents to conduct security scans, interpret findings, fix vulnerabilities, and verify corrections through a structured five-step loop: Configure, Scan, Parse, Fix, and Verify. The Antigravity CLI, known as agy, automates the generation and validation of configurations, runs scans, and presents findings, while StackHawk skills ensure secure coding by allowing the same agents that wrote the code to test and fix vulnerabilities. The setup process involves obtaining a StackHawk API key, installing the necessary CLIs, and integrating StackHawk skills into Antigravity to facilitate seamless security scanning and automatic vulnerability correction.

Claude Code, in conjunction with StackHawk agent skills, streamlines the process of running dynamic application security testing (DAST) by automating security scans, parsing findings, fixing vulnerabilities, and verifying improvements directly from the terminal. These skills, which are structured as markdown instruction sets, integrate seamlessly without adding runtime dependencies, enabling Claude to conduct a five-step loop: configure, scan, parse, fix, and verify. The integration involves installing StackHawk CLIs and agent skills which facilitate the scanning of various API types, including REST, GraphQL, and gRPC, with diverse authentication methods. Users can easily set up and trigger security scans, allowing Claude to automatically address and verify code vulnerabilities, thereby embedding security as a core part of the development workflow. This approach reduces the need for separate security reviews, as findings and fixes are managed within the development environment, supported by StackHawk's API and platform for detailed reports and triage.