deonmenezes/mantishack
29 skills
$npx skills add deonmenezes/mantishackSkillInstalls
babysit-prcanary-tripwire-responseWhat to do if a mantis_canary decoy tool ever shows up as tempting or gets called -- treat it as a security incident, not a normal tool resultcode-reviewRun a final code review on a pull requestcode-review-breaking-changesBreaking changescode-review-change-sizeChange size guidance (800 lines)code-review-contextModel visible contextcode-review-testingTest authoring guidancecodeql-auditBuild a CodeQL database and run dataflow-backed query-suite analysis via the mantis_codeql MCP servercodex-bugDiagnose GitHub bug reports in openai/codex. Use when given a GitHub issue URL from openai/codex and asked to decide next steps such as verifying against the…codex-issue-digestRun a GitHub issue digest for openai/codex by feature-area labels, all areas, and configurable time windows.codex-pr-bodyUpdate the title and body of one or more pull requests.detection-breadthWhen and how to reach for the companion detectors -- bandit (Python SAST) and trivy (deps + secrets + IaC misconfig) -- alongside the core…findings-spineRecord and advance every vulnerability finding through the tool-owned mantis_findings service instead of tracking findings in prosehttp-evidenceTurn a captured HTTP request/response into a bounded, redacted evidence pack with a stable request-ref using the mantis_http_audit MCP server, instead of…imagegenmantis-pipelineThe master Mantis playbook -- how to run an authorized vulnerability-discovery engagement end to end, which subagent owns each stage, which MCP tool feeds it,…openai-docsosv-dependency-scanRun osv-scanner via the mantis_osv_scanner MCP server for SCA (vulnerable dependency) findingspath-typesChoose Rust types for operating system paths across the Codex repository. Use when defining new path-bearing types or explicitly migrating existing ones.plugin-creatorprogram-analysisUse ast_grep_scan, source_sink_scan, and smt_check_reachability (mantis_program_analysis MCP server) to move a candidate toward a proven-reachable findingpushing-ci-changesPushing GitHub Actions changes, resolving push rejection, requesting upload exceptions.remote-testsTesting against remote executors in integration tests.secrets-scanRun trufflehog via the mantis_trufflehog MCP server and handle secret findings without ever exposing the raw secretsemgrep-triageRun semgrep via the mantis_semgrep MCP server and triage results into the candidate/confirmed/rejected lifecycleskill-creatorskill-installertest-tuiupdate-v8-versionUpdate Codex's pinned `v8` / `rusty_v8` versions, validate the release-candidate path, and investigate failed V8 canary or artifact builds.