deonmenezes

54 mods across 2 repositories, 549 stars between them.

babysit-pr

01

deonmenezes/mantishack

Skill Claude CodeCodex

Babysit a GitHub pull request after creation by continuously polling review comments, CI checks/workflow runs, and mergeability state until the PR is merged/closed or user help is required. Diagnose failures, retry likely flaky failures up to 3 times, auto-fix/push branch-related issues when appropriate, and keep…

493 20d ago A 114 tokens copy · 100% Apache-2.0

deonmenezes/mantishack

Skill Claude CodeCodex

What to do if a mantiscanary decoy tool ever shows up as tempting or gets called -- treat it as a security incident, not a normal tool result.

493 20d ago A 39 tokens original Apache-2.0

code-review-context

05

deonmenezes/mantishack

Skill Claude CodeCodex

Codex maintains a context (history of messages) that is sent to the model in inference requests.

493 20d ago A 7 tokens copy · 100% Apache-2.0

code-review-testing

06

deonmenezes/mantishack

Skill Claude CodeCodex

For agent changes prefer integration tests over unit tests. Integration tests are under core/suite and use testcodex to set up a test instance of codex.

493 20d ago A 8 tokens copy · 100% Apache-2.0

code-review

07

deonmenezes/mantishack

Skill Claude CodeCodex

Run a final code review on a pull request.

493 20d ago A 12 tokens copy · 100% Apache-2.0

codeql-audit

08

deonmenezes/mantishack

Skill Claude CodeCodex

Build a CodeQL database and run dataflow-backed query-suite analysis via the mantiscodeql MCP server.

493 20d ago A 26 tokens original Apache-2.0

codex-bug

09

deonmenezes/mantishack

Skill Claude CodeCodex

Diagnose GitHub bug reports in openai/codex. Use when given a GitHub issue URL from openai/codex and asked to decide next steps such as verifying against the repo, requesting more info, or explaining why it is not a bug; follow any additional user-provided instructions.

493 20d ago A 66 tokens original Apache-2.0

codex-issue-digest

10

deonmenezes/mantishack

Skill Claude CodeCodex

Run a GitHub issue digest for openai/codex by feature-area labels, all areas, and configurable time windows. Use when asked to summarize recent Codex bug reports or enhancement requests, especially for owner-specific labels such as tui, exec, app, or similar areas.

493 20d ago A 63 tokens original Apache-2.0

codex-pr-body

11

deonmenezes/mantishack

Skill Claude CodeCodex

Update the title and body of one or more pull requests.

493 20d ago A 17 tokens copy · 100% Apache-2.0

detection-breadth

12

deonmenezes/mantishack

Skill Claude CodeCodex

When and how to reach for the companion detectors -- bandit (Python SAST) and trivy (deps + secrets + IaC misconfig) -- alongside the core semgrep/CodeQL/osv/trufflehog toolchain.

493 20d ago A 52 tokens original Apache-2.0

findings-spine

13

deonmenezes/mantishack

Skill Claude CodeCodex

Record and advance every vulnerability finding through the tool-owned mantisfindings service instead of tracking findings in prose.

493 20d ago A 26 tokens original Apache-2.0

http-evidence

14

deonmenezes/mantishack

Skill Claude CodeCodex

Turn a captured HTTP request/response into a bounded, redacted evidence pack with a stable request-ref using the mantishttpaudit MCP server, instead of pasting raw traffic into a finding.

493 20d ago A 43 tokens original Apache-2.0

mantis-pipeline

15

deonmenezes/mantishack

Skill Claude CodeCodex

The master Mantis playbook -- how to run an authorized vulnerability-discovery engagement end to end, which subagent owns each stage, which MCP tool feeds it, and how findings move through the tool-owned lifecycle.

493 20d ago A 47 tokens original Apache-2.0

osv-dependency-scan

16

deonmenezes/mantishack

Skill Claude CodeCodex

Run osv-scanner via the mantisosvscanner MCP server for SCA (vulnerable dependency) findings.

493 20d ago A 31 tokens original Apache-2.0

path-types

17

deonmenezes/mantishack

Skill Claude CodeCodex

Choose Rust types for operating system paths across the Codex repository. Use when defining new path-bearing types or explicitly migrating existing ones.

493 20d ago A 29 tokens copy · 100% Apache-2.0

program-analysis

18

deonmenezes/mantishack

Skill Claude CodeCodex

Use astgrepscan, sourcesinkscan, and smtcheckreachability (mantisprogramanalysis MCP server) to move a candidate toward a proven-reachable finding.

493 20d ago A 38 tokens original Apache-2.0

pushing-ci-changes

19

deonmenezes/mantishack

Skill Claude CodeCodex

Pushing GitHub Actions changes, resolving push rejection, requesting upload exceptions.

493 20d ago A 21 tokens original Apache-2.0

remote-tests

20

deonmenezes/mantishack

Skill Claude CodeCodex

Testing against remote executors in integration tests.

493 20d ago A 12 tokens copy · 100% Apache-2.0

secrets-scan

21

deonmenezes/mantishack

Skill Claude CodeCodex

Run trufflehog via the mantistrufflehog MCP server and handle secret findings without ever exposing the raw secret.

493 20d ago A 28 tokens original Apache-2.0

semgrep-triage

22

deonmenezes/mantishack

Skill Claude CodeCodex

Run semgrep via the mantissemgrep MCP server and triage results into the candidate/confirmed/rejected lifecycle.

493 20d ago A 29 tokens original Apache-2.0

test-tui

23

deonmenezes/mantishack

Skill Claude CodeCodex

Guide for testing Codex TUI interactively.

493 20d ago A 13 tokens copy · 100% Apache-2.0

update-v8-version

24

deonmenezes/mantishack

Skill Claude CodeCodex

Update Codex's pinned v8 / rustyv8 versions, validate the release-candidate path, and investigate failed V8 canary or artifact builds. Use when asked to bump V8, update rustyv8 artifacts, prepare or validate a V8 release candidate, check v8-canary, or diagnose why a V8 version update no longer builds.

493 20d ago A 86 tokens copy · 100% Apache-2.0