vmihalis/hacker-bob

A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com

97Stars on the repository
41Mods indexed here, across every type
3d agoLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown

PreToolUse

01

vmihalis/hacker-bob

Hook Claude Code

Runs before the agent uses a tool for Bash, Read, Grep, Write, Edit, MultiEdit, mcp__hacker-bob__bob_http_scan, mcp__hacker-bob__bob_write_wave_handoff, mcp__hacker-bob__bob_finalize_agent_run, Agent and Task tool calls, executing session-write-guard.sh, session-read-guard.sh, bob-http-write-confirm.sh and…

97 3d ago A tokens not measured original Apache-2.0

SessionStart

02

vmihalis/hacker-bob

Hook Claude Code

Runs when a session starts on startup, executing bob-check-update.js via node. From vmihalis/hacker-bob.

97 3d ago A tokens not measured original Apache-2.0

SubagentStart

03

vmihalis/hacker-bob

Hook Claude Code

Runs when a subagent starts for evaluator-agent, evaluator-fanout, evaluator-evm-agent, evaluator-svm-agent, evaluator-move-agent, evaluator-substrate-agent and evaluator-cosmwasm-agent tool calls, executing agent-run-start.js via node (7 commands). From vmihalis/hacker-bob.

97 3d ago A tokens not measured original Apache-2.0

SubagentStop

04

vmihalis/hacker-bob

Hook Claude Code

Runs when a subagent finishes for evaluator-agent, evaluator-fanout, evaluator-evm-agent, evaluator-svm-agent, evaluator-move-agent, evaluator-substrate-agent, evaluator-cosmwasm-agent and evaluator-fanout-child tool calls, executing agent-run-stop.js via node (8 commands). From vmihalis/hacker-bob.

97 3d ago A tokens not measured original Apache-2.0