Skip to main content
mondoohq
GitHub creator profile

mondoohq

Repository-level view of 18 collected skills across 3 GitHub repositories.

skills collected
18
repositories
3
updated
Aug 23, 2026
repository explorer

Repositories and representative skills

staged-discovery
unclassified

Add staged discovery support to a provider. Use when the user wants to implement staged/phased discovery, break down discovery into stages, add OptionStagedDiscovery support, or optimize a provider's memory usage during discovery. Triggers on requests like…

Aug 20, 2026
provider-api-call-dedup
unclassified

Use when a provider scan is slow, times out, or trips rate limits (429, throttling, Retry-After), when the same request URL appears many times in a debug log, when an asset's fields look like they cost one API call per scanned asset, or when auditing any…

Aug 19, 2026
new-resource
unclassified

Add or change a resource in an existing mql provider — schema, codegen, implementation, tests, and verification against a real target. Use when the user wants to add a resource or fields to a provider (e.g. "add a bind9 resource", "expose the tomcat…

Aug 18, 2026
new-provider
software-developers

Scaffold a new mql provider. Use when the user wants to create a new provider, bootstrap a provider, or add a new integration target (e.g., "create a provider for Datadog", "scaffold a new provider", "add a new provider").

Aug 16, 2026
update-provider-deps
software-developers

Upgrade an mql provider's vendored SDKs (all providers or a named subset), audit the new versions for breaking changes and fix call sites while keeping shipped MQL fields backwards-compatible, check whether .lr enum comments drifted, and propose a numbered…

Aug 16, 2026
provider-bug-review
software-developers

Deep static code review of an mql provider for logic errors, nil-handling bugs, pagination truncation, caching/__id collisions, and other defects that silently give users wrong data. Use this whenever someone wants to audit, review, deep-dive, bug-hunt, or…

Jul 21, 2026
provider-verification
software-developers

Verify mql provider resource/field changes against real cloud infrastructure. Given a pull request or a commit range, this provisions Terraform infra in the affected cloud(s), runs mql queries against every new or changed resource and field, reports the…

Jul 18, 2026
provider-release
software-developers

Release mql providers by bumping their versions. Use when the user wants to release providers, bump provider versions, check which providers have changes, or prepare a provider release PR. Triggers on requests like "release providers", "bump provider…

Mar 17, 2026
Showing 8 of 9 collected skills.
xgrep-rule-creator
unclassified

Creates custom xgrep rules for detecting security vulnerabilities, bug patterns, and code anti-patterns. Supports both creating new rules from scratch and porting existing rules to new languages. Use when writing xgrep/Semgrep YAML rules or building custom…

Aug 23, 2026
xgrep-fix
software-quality-assurance-analysts-and-testers

Fixes a whole set of xgrep findings — or just the triage-confirmed true positives in a findings.json — in one pass via the verify/apply harness. Auto-applies deterministic fixes (xgrep fix --confirmed), drives the assisted author/verify/apply loop per…

Aug 23, 2026
xgrep-remediate
unclassified

Fixes a confirmed xgrep finding safely using the verify/apply harness — applies deterministic fixes, authors and verifies assisted fixes against the fix contract, and surfaces advisory guidance. Use to remediate a specific finding you already believe is a…

Aug 23, 2026
secure-coding
software-developers

Review code for security vulnerabilities and provide secure coding guidance across Go, Python, JavaScript, Java, Ruby, C#, and Swift. Triggers on code review, security questions, and vulnerability prevention.

Jul 16, 2026
xgrep-inspect
software-developers

Investigates and navigates source code using xgrep's AST-powered code intelligence. Use when exploring unfamiliar code, finding definitions/references, understanding dependencies, or assessing change impact.

Jul 16, 2026
xgrep-triage
software-quality-assurance-analysts-and-testers

Investigates and classifies xgrep scan findings using code graph analysis for call chain navigation and dataflow tracing. Use when triaging SAST findings, investigating vulnerabilities, or classifying true/false positives.

Jul 16, 2026
mondoo-mql
information-security-analysts

Use when writing MQL (Mondoo Query Language) queries, working with Mondoo MCP tools, or developing security policies

Apr 20, 2026
Showing 3 of 3 repositories
All repositories loaded