Skip to main content
mondoohq
GitHub-Creator-Profil

mondoohq

Repository-Ansicht von 18 gesammelten Skills in 3 GitHub-Repositories.

gesammelte Skills
18
Repositories
3
aktualisiert
23. Aug. 2026
Repository-Explorer

Repositories und repräsentative Skills

staged-discovery
nicht klassifiziert

Add staged discovery support to a provider. Use when the user wants to implement staged/phased discovery, break down discovery into stages, add OptionStagedDiscovery support, or optimize a provider's memory usage during discovery. Triggers on requests like…

20. Aug. 2026
provider-api-call-dedup
nicht klassifiziert

Use when a provider scan is slow, times out, or trips rate limits (429, throttling, Retry-After), when the same request URL appears many times in a debug log, when an asset's fields look like they cost one API call per scanned asset, or when auditing any…

19. Aug. 2026
new-resource
nicht klassifiziert

Add or change a resource in an existing mql provider — schema, codegen, implementation, tests, and verification against a real target. Use when the user wants to add a resource or fields to a provider (e.g. "add a bind9 resource", "expose the tomcat…

18. Aug. 2026
new-provider
Softwareentwickler

Scaffold a new mql provider. Use when the user wants to create a new provider, bootstrap a provider, or add a new integration target (e.g., "create a provider for Datadog", "scaffold a new provider", "add a new provider").

16. Aug. 2026
update-provider-deps
Softwareentwickler

Upgrade an mql provider's vendored SDKs (all providers or a named subset), audit the new versions for breaking changes and fix call sites while keeping shipped MQL fields backwards-compatible, check whether .lr enum comments drifted, and propose a numbered…

16. Aug. 2026
provider-bug-review
Softwareentwickler

Deep static code review of an mql provider for logic errors, nil-handling bugs, pagination truncation, caching/__id collisions, and other defects that silently give users wrong data. Use this whenever someone wants to audit, review, deep-dive, bug-hunt, or…

21. Juli 2026
provider-verification
Softwareentwickler

Verify mql provider resource/field changes against real cloud infrastructure. Given a pull request or a commit range, this provisions Terraform infra in the affected cloud(s), runs mql queries against every new or changed resource and field, reports the…

18. Juli 2026
provider-release
Softwareentwickler

Release mql providers by bumping their versions. Use when the user wants to release providers, bump provider versions, check which providers have changes, or prepare a provider release PR. Triggers on requests like "release providers", "bump provider…

17. März 2026
Es werden 8 von 9 gesammelten Skills angezeigt.
xgrep-rule-creator
nicht klassifiziert

Creates custom xgrep rules for detecting security vulnerabilities, bug patterns, and code anti-patterns. Supports both creating new rules from scratch and porting existing rules to new languages. Use when writing xgrep/Semgrep YAML rules or building custom…

23. Aug. 2026
xgrep-fix
Softwarequalitätssicherungsanalysten und -tester

Fixes a whole set of xgrep findings — or just the triage-confirmed true positives in a findings.json — in one pass via the verify/apply harness. Auto-applies deterministic fixes (xgrep fix --confirmed), drives the assisted author/verify/apply loop per…

23. Aug. 2026
xgrep-remediate
nicht klassifiziert

Fixes a confirmed xgrep finding safely using the verify/apply harness — applies deterministic fixes, authors and verifies assisted fixes against the fix contract, and surfaces advisory guidance. Use to remediate a specific finding you already believe is a…

23. Aug. 2026
secure-coding
Softwareentwickler

Review code for security vulnerabilities and provide secure coding guidance across Go, Python, JavaScript, Java, Ruby, C#, and Swift. Triggers on code review, security questions, and vulnerability prevention.

16. Juli 2026
xgrep-inspect
Softwareentwickler

Investigates and navigates source code using xgrep's AST-powered code intelligence. Use when exploring unfamiliar code, finding definitions/references, understanding dependencies, or assessing change impact.

16. Juli 2026
xgrep-triage
Softwarequalitätssicherungsanalysten und -tester

Investigates and classifies xgrep scan findings using code graph analysis for call chain navigation and dataflow tracing. Use when triaging SAST findings, investigating vulnerabilities, or classifying true/false positives.

16. Juli 2026
mondoo-mql
Informationssicherheitsanalysten

Use when writing MQL (Mondoo Query Language) queries, working with Mondoo MCP tools, or developing security policies

20. Apr. 2026
3 von 3 Repositories angezeigt
Alle Repositories angezeigt