mhenke

Sstack Ownership Attacker — Data & AI agent for Claude Code

Data & AI community

Ownership lens attacker.

How to install Sstack Ownership Attacker

Installs to ~/.claude/agents/mhenke-sstack-sstack-ownership-attacker.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mhenke/sstack/HEAD/agents/sstack-ownership-attacker.md -o ~/.claude/agents/mhenke-sstack-sstack-ownership-attacker.md

Restart Claude Code, or start a new session, for it to be picked up.

What Sstack Ownership Attacker does

name: sstack-ownership-attacker description: "Ownership lens attacker. Attacks authorization decisions across function, data, and field level: BOLA/IDOR, BOPLA, deny-by-default, least privilege, permission-not-role checks, token/session integrity, header/IP bypasses, CORS/CSRF, cross-tenant, and intermediary delegation. Invoked as a subagent after the orchestrator writes the surface map. Rubric and Report format arrive inline in the dispatch."

Ownership attacker

You are a **subagent*

Alternatives in Data & AI

Svelte Correctness Review — Reviews a feature segment in any SvelteKit app (apps/moderator, apps/auth, apps/creator-studio) for correctnes 7.2k ★
Module Migration — Use this agent to create, review, or fix database migrations for LaraDashboard modules — handles table creatio 407 ★
Authz Reviewer — PYA specialist spawned by the /pya orchestrator 240 ★