← Back to Skills Marketplace
Stackhawk
by
Vlad Ursul
· GitHub ↗
· v1.0.3
· MIT-0
186
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install stackhawk
Description
StackHawk integration. Manage data, records, and automate workflows. Use when the user wants to interact with StackHawk data.
Usage Guidance
This skill delegates StackHawk interactions to the Membrane platform and asks you to install/run the @membranehq CLI. Before installing or using it: (1) confirm you trust Membrane — review their privacy, data retention, and security documentation because your StackHawk data and connection metadata will be proxied through their service; (2) prefer using npx or a pinned package version rather than a global `npm install -g @membranehq/cli@latest`; (3) verify the npm package and the GitHub repository listed in SKILL.md match the official Membrane project; (4) avoid using this with highly sensitive production secrets until you understand how Membrane stores and scopes credentials; and (5) if you want the agent to operate autonomously, explicitly review what actions the agent will run and consider restricting autonomous invocation or requiring manual approval for destructive operations.
Capability Analysis
Type: OpenClaw Skill
Name: stackhawk
Version: 1.0.3
The skill bundle provides instructions for an AI agent to integrate with StackHawk using the Membrane CLI. The SKILL.md file outlines standard procedures for installation, authentication, and executing security scans via the 'membrane' command-line tool. No malicious logic, data exfiltration attempts, or harmful prompt injections were found; the instructions actually encourage secure practices by advising the agent to let the external service handle credential management rather than requesting secrets from the user.
Capability Assessment
Purpose & Capability
The skill claims to integrate with StackHawk but all runtime instructions route actions through the Membrane platform/CLI. That is a plausible design (Membrane acts as a connector), but the registry metadata and SKILL.md do not explicitly state that StackHawk access will be proxied via Membrane servers — users should understand that data and credentials will be managed by Membrane rather than being used directly by the agent.
Instruction Scope
SKILL.md instructs the operator to install and run the @membranehq/cli, perform interactive (or headless URL-based) login, create connections, and run actions. Those steps implicitly transmit connection metadata and action inputs to the Membrane service. The instructions do not describe what data is sent to Membrane, retention, or privacy/security implications. While the commands themselves are limited to the stated integration task, the lack of explicit data-flow/privilege disclosure is a scope concern.
Install Mechanism
The registry has no install spec, but SKILL.md asks users to run `npm install -g @membranehq/cli@latest` (or use npx). Installing a global npm package is a moderate-risk operation (writes to system PATH) and pulls code from the public npm registry; the SKILL.md does not recommend verifying package provenance or provide pinned versions. This is expected for a CLI-based integration but should be reviewed before global installation.
Credentials
The skill declares no required environment variables or local credentials and the instructions emphasise that Membrane manages auth server-side. That aligns with the stated purpose. However, because credentials and action payloads will be handled by Membrane, the user must be comfortable delegating access to a third party.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request elevated platform privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined here with other high-risk factors.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install stackhawk - After installation, invoke the skill by name or use
/stackhawk - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Stackhawk?
StackHawk integration. Manage data, records, and automate workflows. Use when the user wants to interact with StackHawk data. It is an AI Agent Skill for Claude Code / OpenClaw, with 186 downloads so far.
How do I install Stackhawk?
Run "/install stackhawk" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Stackhawk free?
Yes, Stackhawk is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Stackhawk support?
Stackhawk is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Stackhawk?
It is built and maintained by Vlad Ursul (@gora050); the current version is v1.0.3.
More Skills