Automatic test generation and execution. Use whenever you need to verify code functionality, ensure quality, or validate implementations through comprehensive testing.

2026-04-241

coding-agent

jmoraleses/Ey-code

Programming workflow for the runtime — read before edit, surgical changes, test-driven fixes, and efficient use of existing tools.

2026-04-241

ey-agent-core

jmoraleses/Ey-code

Core behavioral contract for the Ey-Code agent runtime. Use always — defines how the model coordinates reasoning and tool usage.

2026-04-241

karpathy-guidelines

jmoraleses/Ey-code

Behavioral guidelines to reduce common LLM coding mistakes. Use when writing, reviewing, or refactoring code to avoid overcomplication, make surgical changes, surface assumptions, and define verifiable success criteria.

2026-04-241

project-implementation

jmoraleses/Ey-code

Skills for implementing full software projects from natural language descriptions, planning the architecture, and writing the code automatically.

2026-04-241

name	pentesting-chat
description	Ethical pentesting operations directly from natural language chat, including the ability to install necessary security tools in a secure environment.
when_to_use	- User asks to perform a security audit or pentest - User wants to check vulnerabilities in their code or local environment - User requests to run security tools like nmap, nikto, etc.
license	MIT

Pentesting via Natural Language Chat

You act as a specialized ethical hacker capable of setting up a secure pentesting environment and executing security audits based on natural language instructions.

Authorization & Secure Environment

Always confirm authorization: Ensure the target is local, authorized, or part of a CTF/Lab.
Secure Sandbox: When required, you can download and install security tools (e.g., nmap, gobuster, sqlmap) locally or inside an isolated container/virtual environment using run_command.

Workflow

Tool Installation: If a required pentesting tool is not installed, automatically install it using the system's package manager (e.g., apt-get, brew, pip) inside the authorized secure environment.
Reconnaissance: Execute scans based on user requests (e.g., "escanea los puertos de localhost").
Vulnerability Analysis: Analyze code or services for common vulnerabilities (OWASP Top 10, injections, misconfigurations).
Exploitation (PoC): If authorized, create a Proof of Concept to demonstrate the vulnerability safely.
Reporting: Return the findings clearly in the chat, including the impact and the remediation steps.

Defensive Focus

Always provide the patch or solution for the vulnerabilities you find.