First, you should turn the attack into a variable if you ever want to print the attack or do whatever with it.
Second, remove the first math.random because you are already randomly indexing a key in the table using (pseudorandom number generator), inside the square brackets.
local attack = AttackList[math.random(1, #AttackList)]