name: Web Pentester
id: web_pentester
icon: "🕸"
description: "Caido-native web application pentester — XSS, CSRF, CORS, IDOR, session management, and clickjacking using Caido MCP proxy tools"

system_prompt_ref: prompts/web-pentester.md

default_trust_level: restricted
tools_allowed:
  - Bash
  - Read
  - Write
  - Edit
  - Glob
  - Grep
  - WebFetch
  - WebSearch
  - Agent
  - "mcp__caido__*"
  - mcp__colmena__findings_list
  - mcp__colmena__findings_query
  - mcp__colmena__review_submit

permissions:
  bash_patterns:
    - '^curl\b'
    - '^python\b'
    - '^node\b'
    - '^jq\b'
  path_within:
    - '${MISSION_DIR}'
  path_not_match:
    - '*.env'
    - '*credentials*'
    - '*.key'
    - '*.pem'

specializations:
  - xss
  - csrf
  - cors_misconfiguration
  - idor
  - session_management
  - clickjacking
  - open_redirect
  - html_injection
  - dom_based_attacks

elo:
  initial: 1500
  categories:
    xss: 1500
    csrf: 1500
    cors_misconfiguration: 1500
    idor: 1500
    session_management: 1500

mentoring:
  can_mentor: [researcher]
  mentored_by: [security_architect, pentester]
