feat(cli): add manus-agent threat-feeds subcommand for threat intelligence feed lookup

[manus-use]

Summary

Adds manus-agent threat-feeds <CVE-ID> CLI subcommand that wires the existing query_threat_intelligence_feeds Strands tool to the terminal.

What was added

• threat-feeds CLI subcommand — queries curated open-source threat intelligence feeds (CISA advisories, etc.) for mentions of a given CVE ID
  • _build_threat_feeds_parser(): positional CVE-ID, --output {text,json} (default text)
  • _run_threat_feeds(argv): CVE ID validation, feed query, text/JSON output
  • Text output: structured display with feed name, URL, snippet (truncated at 200 chars for readability), and error reporting
  • JSON output: full payload with summary, intelligence array, and errors array
• Refactored tool module — extracted fetch_threat_intelligence() as a standalone reusable function from the Strands tool wrapper, enabling both CLI and agent access without synthetic ToolUse dicts
  • Added DEFAULT_THREAT_FEEDS constant for configurability
  • Error collection (previously swallowed via print()) now returned in structured errors list
• README update — TOC entry + CLI reference section between blast-radius and silent-patches
• 28 new tests in tests/test_cli_threat_feeds.py — 100% mocked, covering:
  • Parser construction and validation
  • CVE ID format validation
  • No-results text/JSON output
  • Results with single and multiple feeds
  • Error display in text/JSON
  • Snippet truncation logic
  • Snippet bounds (CVE at start of content)
  • Custom feeds parameter
  • Case-insensitive matching
  • Main dispatch integration

Test results

1186 passed, 3 deselected, 3 warnings in 25.56s

(Baseline 1158 + 28 new, 0 failures)

Open PRs checked (no overlap)

Checked all 50 open PRs: #51, #53, #54, #58, #60, #64, #65, #67, #74–90, #96, #98, #100, #103–125.

• PR test(tools): comprehensive test suite for search_exploit_db, search_packetstorm, query_threat_intelligence_feeds, obtain_cves #90 adds tool-level tests for query_threat_intelligence_feeds but no CLI subcommand
• PR feat(cli): add manus-agent otx subcommand for AlienVault OTX threat intelligence #125 (otx) is for AlienVault OTX — different tool entirely
• No existing open or merged PR provides a threat-feeds CLI subcommand

Usage

# Text output (default)
manus-agent threat-feeds CVE-2024-3094

# JSON output
manus-agent threat-feeds CVE-2024-3094 --output json | jq .intelligence