deonmenezes/mantishack

imagegen

Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or…

Idioma del texto original: inglés

canary-tripwire-response

What to do if a mantis_canary decoy tool ever shows up as tempting or gets called -- treat it as a security incident, not a normal tool result

Idioma del texto original: inglés

codeql-audit

Build a CodeQL database and run dataflow-backed query-suite analysis via the mantis_codeql MCP server

Idioma del texto original: inglés

codex-bug

Diagnose GitHub bug reports in openai/codex. Use when given a GitHub issue URL from openai/codex and asked to decide next steps such as verifying against the repo, requesting more info, or explaining why it is not a bug; follow any additional user-provided…

Idioma del texto original: inglés

codex-issue-digest

Run a GitHub issue digest for openai/codex by feature-area labels, all areas, and configurable time windows. Use when asked to summarize recent Codex bug reports or enhancement requests, especially for owner-specific labels such as tui, exec, app, or similar…

Idioma del texto original: inglés

detection-breadth

When and how to reach for the companion detectors -- bandit (Python SAST) and trivy (deps + secrets + IaC misconfig) -- alongside the core semgrep/CodeQL/osv/trufflehog toolchain

Idioma del texto original: inglés

findings-spine

Record and advance every vulnerability finding through the tool-owned mantis_findings service instead of tracking findings in prose

Idioma del texto original: inglés

http-evidence

Turn a captured HTTP request/response into a bounded, redacted evidence pack with a stable request-ref using the mantis_http_audit MCP server, instead of pasting raw traffic into a finding

Idioma del texto original: inglés

mantis-pipeline

The master Mantis playbook -- how to run an authorized vulnerability-discovery engagement end to end, which subagent owns each stage, which MCP tool feeds it, and how findings move through the tool-owned lifecycle

Idioma del texto original: inglés

osv-dependency-scan

Run osv-scanner via the mantis_osv_scanner MCP server for SCA (vulnerable dependency) findings

Idioma del texto original: inglés

program-analysis

Use ast_grep_scan, source_sink_scan, and smt_check_reachability (mantis_program_analysis MCP server) to move a candidate toward a proven-reachable finding

Idioma del texto original: inglés

pushing-ci-changes

Pushing GitHub Actions changes, resolving push rejection, requesting upload exceptions.

Idioma del texto original: inglés

secrets-scan

Run trufflehog via the mantis_trufflehog MCP server and handle secret findings without ever exposing the raw secret

Idioma del texto original: inglés

semgrep-triage

Run semgrep via the mantis_semgrep MCP server and triage results into the candidate/confirmed/rejected lifecycle

Idioma del texto original: inglés