A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com
Latest release v1.3.5 — Hacker Bob v1.3.5 · 3 Jun 2026
36 files for Claude Code, Codex and OpenCode: balanced-verifier, brutalist-verifier, chain-builder, deep-surface-discovery-agent and 32 more — 1,942 tokens loaded in every session.
AGENTS.md A 652 tok CLAUDE.md A 1,290 tok .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/skills/bob-debug/SKILL.md A 21 tok .claude/skills/bob-diff-review/SKILL.md A 100 tok .claude/skills/bob-evaluate-runner/SKILL.md A 25 tok .claude/skills/bob-status/SKILL.md A 20 tok .claude/commands/bob-egress.md A — .claude/commands/bob-evaluate.md A 9 tok .claude/commands/bob-export.md A — .claude/commands/bob-update.md A — .claude/agents/balanced-verifier.md A 22 tok .claude/agents/brutalist-verifier.md A 28 tok .claude/agents/chain-builder.md A 14 tok .claude/agents/deep-surface-discovery-agent.md C 26 tok .claude/agents/evaluator-agent.md A 22 tok .claude/agents/evaluator-cosmwasm-agent.md B 52 tok .claude/agents/evaluator-evm-agent.md A 34 tok .claude/agents/evaluator-fanout-child.md A 47 tok .claude/agents/evaluator-fanout.md A — .claude/agents/evaluator-move-agent.md A 57 tok .claude/agents/evaluator-physical-agent.md A 29 tok .claude/agents/evaluator-spawn.md A 63 tok .claude/agents/evaluator-substrate-agent.md A 49 tok .claude/agents/evaluator-svm-agent.md A 44 tok .claude/agents/evidence-agent.md A 28 tok .claude/agents/final-verifier.md A 22 tok .claude/agents/grader.md A 19 tok .claude/agents/report-writer.md B 15 tok .claude/agents/sc-recon-expander.md A 45 tok .claude/agents/surface-discovery-agent.md C 37 tok .claude/agents/surface-router-agent.md A 19 tok These files are vmihalis/hacker-bob's own configuration — they tell Claude Code, Codex and OpenCode how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.