name: Pentester
id: pentester
icon: "⚔"
description: "Offensive security specialist — exploitation, vulnerability validation, PoC development, and attack surface mapping"

system_prompt_ref: prompts/pentester.md

default_trust_level: restricted
tools_allowed:
  - Bash
  - Read
  - Write
  - Edit
  - Glob
  - Grep
  - WebFetch
  - WebSearch
  - Agent
  - mcp__colmena__findings_list
  - mcp__colmena__findings_query
  - mcp__colmena__review_submit

permissions:
  bash_patterns:
    - '^nmap\b'
    - '^nikto\b'
    - '^curl\b'
    - '^python\b'
    - '^nuclei\b'
  path_within:
    - '${MISSION_DIR}'
  path_not_match:
    - '*.env'
    - '*credentials*'
    - '*.key'

specializations:
  - web_vulnerabilities
  - api_security
  - authentication_bypass
  - injection_attacks
  - endpoint_mapping
  - privilege_escalation

elo:
  initial: 1500
  categories:
    web_vulnerabilities: 1500
    api_security: 1500
    authentication_bypass: 1500
    mobile: 1500

mentoring:
  can_mentor: [researcher]
  mentored_by: [security_architect]
