Creating Custom AI Assistants

# Simple tasks - fast, cost-effective
simple:
  model: "gpt-4.1-mini"
  temperature: 0.5
  top_p: 0.5
  n: 1
  max_tokens: 3000
  price:
    input: 0.4
    output: 1.6

# Primary reasoning agent
primary_agent:
  model: "o3-mini"
  n: 1
  max_tokens: 4000
  reasoning:
    effort: low
  price:
    input: 1.1
    output: 4.4

# Complex assistant tasks
assistant:
  model: "o3-mini"
  n: 1
  max_tokens: 6000
  reasoning:
    effort: medium
  price:
    input: 1.1
    output: 4.4

# Code generation and exploit development
coder:
  model: "gpt-4.1"
  temperature: 0.2
  top_p: 0.1
  n: 1
  max_tokens: 6000
  price:
    input: 2.0
    output: 8.0

# Penetration testing agent
pentester:
  model: "o3-mini"
  n: 1
  max_tokens: 4000
  reasoning:
    effort: low
  price:
    input: 1.1
    output: 4.4

# Fast tasks - OpenAI mini
simple:
  model: "gpt-4.1-mini"
  temperature: 0.5
  max_tokens: 3000

# Research - OpenAI mini
searcher:
  model: "gpt-4.1-mini"
  temperature: 0.7
  max_tokens: 4000

# Strategic planning - Claude Sonnet (via Bedrock)
primary_agent:
  model: "anthropic.claude-sonnet-4"
  temperature: 1.0
  max_tokens: 4000

# Complex reasoning - Claude with thinking
assistant:
  model: "anthropic.claude-3-7-sonnet"
  temperature: 1.0
  max_tokens: 6000
  reasoning:
    max_tokens: 2048

# Code generation - GPT-4.1
coder:
  model: "gpt-4.1"
  temperature: 0.2
  max_tokens: 6000

# Active testing - OpenAI reasoning
pentester:
  model: "o3-mini"
  max_tokens: 4000
  reasoning:
    effort: low

name: "Web App Specialist"
description: "Specialized in web application vulnerability assessment"
use_agents: true

prompt_template: |
  You are a web application security specialist. Your expertise includes:
  - OWASP Top 10 vulnerabilities
  - SQL injection and XSS
  - Authentication and session management
  - API security testing
  
  For each target:
  1. Map the application structure
  2. Identify input vectors
  3. Test for common vulnerabilities
  4. Validate findings with proof-of-concept
  5. Document remediation guidance

name: "Network Infrastructure Specialist"
description: "Focused on network-level penetration testing"
use_agents: true

prompt_template: |
  You specialize in network infrastructure security assessment:
  - Network mapping and reconnaissance
  - Port and service enumeration
  - Vulnerability scanning
  - Exploit development for network services
  
  Methodology:
  1. Passive reconnaissance
  2. Active scanning with nmap
  3. Service enumeration
  4. Vulnerability identification
  5. Exploitation attempts
  6. Post-exploitation and pivoting

name: "API Security Specialist"
description: "REST and GraphQL API security testing"
use_agents: false

prompt_template: |
  You are an API security expert focusing on:
  - REST and GraphQL endpoints
  - Authentication mechanisms (OAuth, JWT)
  - Authorization bypass
  - Input validation and injection
  - Rate limiting and abuse
  
  Testing approach:
  1. API documentation analysis
  2. Endpoint enumeration
  3. Authentication testing
  4. Authorization boundary testing
  5. Input fuzzing
  6. Business logic vulnerabilities