Claude Code Plugin Marketplace

Build without
pause.

A context-engineering toolkit for Claude Code. Three plugins that add what the model can't provide for itself: the questions your project needs answered before building, and the gates it can't skip before shipping.

★ Star on GitHub
# Add the Attacca marketplace
/plugin marketplace add adihebbalae/Attacca
✓ Marketplace "attacca" registered
 
# Install the plugins you need
/plugin install attacca-core@attacca
/plugin install attacca-security@attacca
/plugin install attacca-init@attacca
✓ 3 plugins installed

Install only what you need.

Each plugin works standalone — no shared runtime, no persona system, no state files to keep in sync. Click a card for the full skill list.

attacca-core
Workflow skills
diagnose, tdd, code-review, quality-gate, prototype, grill-me, wrap-session, bdr-commit, and more. Plus critic + researcher subagents, and token-saving hooks.
→ view all skills
attacca-security
Audit gate
OWASP security-audit, supply-chain, and SBOM skills. An isolated-context security-auditor subagent, and a hook that blocks git push until a fresh clean audit exists.
→ view all skills
attacca-init
Project intake
/interrogate turns a vague build request into a committed CONTEXT.md spec. Plus init-project, retrofit, validate-idea, and mvp.
→ view all skills

Every artifact is context or verification.

Nothing Attacca ships is process the model already knows how to do — see the design razor in the docs.

01 / DISAMBIGUATE

Describe what you want to build

/interrogate fires on anything ambiguous — auth, payments, data, hosting, budget, non-goals — and writes the answers to a committed CONTEXT.md.

/interrogate
02 / BUILD

Work with gates, not checklists

TDD, code review, and a quality gate run before every push. Security audits in an isolated context — it never sees commit messages.

/quality-gate
03 / CONTINUE

Every session picks up where the last left off

CONTEXT.md is the one file every future session, teammate, or cloud agent reads to orient.

/wrap-session

Type a command, see what it does.

A simulated agent responds in character. Keep talking and it'll point you to the real plugin — this all runs in your browser, nothing is sent anywhere.

Copied to clipboard