Skip to main content
mondoohq
GitHub 创作者资料

mondoohq

按仓库查看 3 个 GitHub 仓库中的 18 个已收集 skills。

已收集 skills
18
仓库
3
更新
2026年8月23日
仓库浏览

仓库与代表性 skills

staged-discovery
未分类

Add staged discovery support to a provider. Use when the user wants to implement staged/phased discovery, break down discovery into stages, add OptionStagedDiscovery support, or optimize a provider's memory usage during discovery. Triggers on requests like…

2026年8月20日
provider-api-call-dedup
未分类

Use when a provider scan is slow, times out, or trips rate limits (429, throttling, Retry-After), when the same request URL appears many times in a debug log, when an asset's fields look like they cost one API call per scanned asset, or when auditing any…

2026年8月19日
new-resource
未分类

Add or change a resource in an existing mql provider — schema, codegen, implementation, tests, and verification against a real target. Use when the user wants to add a resource or fields to a provider (e.g. "add a bind9 resource", "expose the tomcat…

2026年8月18日
new-provider
软件开发工程师

Scaffold a new mql provider. Use when the user wants to create a new provider, bootstrap a provider, or add a new integration target (e.g., "create a provider for Datadog", "scaffold a new provider", "add a new provider").

2026年8月16日
update-provider-deps
软件开发工程师

Upgrade an mql provider's vendored SDKs (all providers or a named subset), audit the new versions for breaking changes and fix call sites while keeping shipped MQL fields backwards-compatible, check whether .lr enum comments drifted, and propose a numbered…

2026年8月16日
provider-bug-review
软件开发工程师

Deep static code review of an mql provider for logic errors, nil-handling bugs, pagination truncation, caching/__id collisions, and other defects that silently give users wrong data. Use this whenever someone wants to audit, review, deep-dive, bug-hunt, or…

2026年7月21日
provider-verification
软件开发工程师

Verify mql provider resource/field changes against real cloud infrastructure. Given a pull request or a commit range, this provisions Terraform infra in the affected cloud(s), runs mql queries against every new or changed resource and field, reports the…

2026年7月18日
provider-release
软件开发工程师

Release mql providers by bumping their versions. Use when the user wants to release providers, bump provider versions, check which providers have changes, or prepare a provider release PR. Triggers on requests like "release providers", "bump provider…

2026年3月17日
已展示 8 / 9 个已收集 Skill。
xgrep-rule-creator
未分类

Creates custom xgrep rules for detecting security vulnerabilities, bug patterns, and code anti-patterns. Supports both creating new rules from scratch and porting existing rules to new languages. Use when writing xgrep/Semgrep YAML rules or building custom…

2026年8月23日
xgrep-fix
软件质量保证分析师与测试员

Fixes a whole set of xgrep findings — or just the triage-confirmed true positives in a findings.json — in one pass via the verify/apply harness. Auto-applies deterministic fixes (xgrep fix --confirmed), drives the assisted author/verify/apply loop per…

2026年8月23日
xgrep-remediate
未分类

Fixes a confirmed xgrep finding safely using the verify/apply harness — applies deterministic fixes, authors and verifies assisted fixes against the fix contract, and surfaces advisory guidance. Use to remediate a specific finding you already believe is a…

2026年8月23日
secure-coding
软件开发工程师

Review code for security vulnerabilities and provide secure coding guidance across Go, Python, JavaScript, Java, Ruby, C#, and Swift. Triggers on code review, security questions, and vulnerability prevention.

2026年7月16日
xgrep-inspect
软件开发工程师

Investigates and navigates source code using xgrep's AST-powered code intelligence. Use when exploring unfamiliar code, finding definitions/references, understanding dependencies, or assessing change impact.

2026年7月16日
xgrep-triage
软件质量保证分析师与测试员

Investigates and classifies xgrep scan findings using code graph analysis for call chain navigation and dataflow tracing. Use when triaging SAST findings, investigating vulnerabilities, or classifying true/false positives.

2026年7月16日
mondoo-mql
信息安全分析师

Use when writing MQL (Mondoo Query Language) queries, working with Mondoo MCP tools, or developing security policies

2026年4月20日
已展示 3 / 3 个仓库
已展示全部仓库