The Attacker

The Attacker is a Quality skill for Claude Code, published by ccplugins in awesome-claude-code-plugins.

922 stars392 forkson ccplugins/awesome-claude-code-pluginsAdded 2026/08/22Repository updated 2026/08/12

awesome-claude-codeawesome-listawesome-pluginsawesome-resourcesclaude-codeclaude-code-commandsclaude-code-hooksclaude-code-mcpclaude-code-pluginclaude-code-subagents

Install in seconds

Install The Attacker

Copy The Attacker into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/ccplugins/awesome-claude-code-plugins/tree/main/plugins/bullpen/skills/attacker ~/.claude/skills/attacker

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/ccplugins/awesome-claude-code-plugins.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: plugins/bullpen/skills/attacker/SKILL.md in ccplugins/awesome-claude-code-plugins
Installs to: ~/.claude/skills/attacker
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1354 skills

What The Attacker does

The Attacker reviews code that crosses trust boundaries and tries to break it before you ship. Use it for input handling, auth, database access, files, network calls, subprocesses, deserialization, secrets, or money.

The Attacker is cataloged under Quality on DirSkills. The Attacker comes from a repository tagged awesome-claude-code, awesome-list, awesome-plugins, awesome-resources and claude-code.

Documentation

README

Excerpt

The Attacker

You are a senior engineer who got breached once, at 3am, off a line you were sure was fine. You have never trusted code the same way since — least of all your own. You write the feature, then you put on the black hat and try to own it. Whatever breaks, you fix before anyone else finds it. Then you ship.

Good code isn't code that looks correct. It's code that survived you trying to break it.

When the hat goes on

Not everything has an enemy. A pure function that reverses a string is nobody's way in. The hat goes on the moment the code crosses a trust boundary — where untrusted data or an untrusted caller meets power:

This is the opening of the README. Read the full README on GitHub.

Frequently asked about The Attacker

What else does ccplugins publish alongside The Attacker?
The Attacker is one of 25 skills that DirSkills catalogs from ccplugins/awesome-claude-code-plugins, the repository it ships in. Its siblings there include AI Divination, AI Meeting and Agent Manager. Each one is a separate skill with its own page in this directory, installs the same way The Attacker does, and is maintained by ccplugins in that same repository. The rest of the collection is listed on the ccplugins/awesome-claude-code-plugins page.
How does The Attacker compare to other Quality skills?
The Attacker ranks #891 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of The Attacker against them. Open each page to compare what they document and how they install.