Skip to main content
mondoohq
Profil créateur GitHub

mondoohq

Vue par dépôt de 18 skills collectés dans 3 dépôts GitHub.

skills collectés
18
dépôts
3
mis à jour
23 août 2026
explorateur de dépôts

Dépôts et skills représentatifs

staged-discovery
non classé

Add staged discovery support to a provider. Use when the user wants to implement staged/phased discovery, break down discovery into stages, add OptionStagedDiscovery support, or optimize a provider's memory usage during discovery. Triggers on requests like…

20 août 2026
provider-api-call-dedup
non classé

Use when a provider scan is slow, times out, or trips rate limits (429, throttling, Retry-After), when the same request URL appears many times in a debug log, when an asset's fields look like they cost one API call per scanned asset, or when auditing any…

19 août 2026
new-resource
non classé

Add or change a resource in an existing mql provider — schema, codegen, implementation, tests, and verification against a real target. Use when the user wants to add a resource or fields to a provider (e.g. "add a bind9 resource", "expose the tomcat…

18 août 2026
new-provider
Développeurs de logiciels

Scaffold a new mql provider. Use when the user wants to create a new provider, bootstrap a provider, or add a new integration target (e.g., "create a provider for Datadog", "scaffold a new provider", "add a new provider").

16 août 2026
update-provider-deps
Développeurs de logiciels

Upgrade an mql provider's vendored SDKs (all providers or a named subset), audit the new versions for breaking changes and fix call sites while keeping shipped MQL fields backwards-compatible, check whether .lr enum comments drifted, and propose a numbered…

16 août 2026
provider-bug-review
Développeurs de logiciels

Deep static code review of an mql provider for logic errors, nil-handling bugs, pagination truncation, caching/__id collisions, and other defects that silently give users wrong data. Use this whenever someone wants to audit, review, deep-dive, bug-hunt, or…

21 juil. 2026
provider-verification
Développeurs de logiciels

Verify mql provider resource/field changes against real cloud infrastructure. Given a pull request or a commit range, this provisions Terraform infra in the affected cloud(s), runs mql queries against every new or changed resource and field, reports the…

18 juil. 2026
provider-release
Développeurs de logiciels

Release mql providers by bumping their versions. Use when the user wants to release providers, bump provider versions, check which providers have changes, or prepare a provider release PR. Triggers on requests like "release providers", "bump provider…

17 mars 2026
Affichage de 8 skills collectés sur 9.
xgrep-rule-creator
non classé

Creates custom xgrep rules for detecting security vulnerabilities, bug patterns, and code anti-patterns. Supports both creating new rules from scratch and porting existing rules to new languages. Use when writing xgrep/Semgrep YAML rules or building custom…

23 août 2026
xgrep-fix
Analystes en assurance qualité des logiciels et testeurs

Fixes a whole set of xgrep findings — or just the triage-confirmed true positives in a findings.json — in one pass via the verify/apply harness. Auto-applies deterministic fixes (xgrep fix --confirmed), drives the assisted author/verify/apply loop per…

23 août 2026
xgrep-remediate
non classé

Fixes a confirmed xgrep finding safely using the verify/apply harness — applies deterministic fixes, authors and verifies assisted fixes against the fix contract, and surfaces advisory guidance. Use to remediate a specific finding you already believe is a…

23 août 2026
secure-coding
Développeurs de logiciels

Review code for security vulnerabilities and provide secure coding guidance across Go, Python, JavaScript, Java, Ruby, C#, and Swift. Triggers on code review, security questions, and vulnerability prevention.

16 juil. 2026
xgrep-inspect
Développeurs de logiciels

Investigates and navigates source code using xgrep's AST-powered code intelligence. Use when exploring unfamiliar code, finding definitions/references, understanding dependencies, or assessing change impact.

16 juil. 2026
xgrep-triage
Analystes en assurance qualité des logiciels et testeurs

Investigates and classifies xgrep scan findings using code graph analysis for call chain navigation and dataflow tracing. Use when triaging SAST findings, investigating vulnerabilities, or classifying true/false positives.

16 juil. 2026
mondoo-mql
Analystes en sécurité de l'information

Use when writing MQL (Mondoo Query Language) queries, working with Mondoo MCP tools, or developing security policies

20 avr. 2026
3 dépôts affichés sur 3
Tous les dépôts sont affichés